Pick a starting point. Every teammate runs on the same signed rail: it cites its sources or refuses, and signs a content-free receipt for every action. The model never holds your keys, and your data never leaves your runtime.