Relay data handling
Decision proof without taking ownership of developer execution or private payloads
What Relay receives
Action Card refs only
What Relay returns
Receipts and trace refs
What Relay avoids
No downstream execution
MCP access
Hashes and fingerprints only
Retention
Receipts, trace replay, audit, and access records
Sharing
No private payloads or token values