What Relay can’t see
The boundaries are as important as the features.
Hard limits
- No code access. Relay stores decisions and context, not repositories. It never reads, clones, or indexes your source — on either surface.
- No cross-tenant access. Isolation is fail-closed at the data layer — one organization physically cannot read another’s memory.
- No training on your data. Your memories are yours; they’re never used to train models.
- Nothing hidden. Every memory is viewable, editable, and deletable from the Memory Browser, and any admin can revoke a token instantly.