How does Catalyst ensure verifiable execution of AI agents in air-gapped environments with MCP tool policies?

Catalyst ensures verifiable execution in air-gapped environments by combining durable execution with workload identity and MCP tool authorization policies. Agents run with verifiable identities, and every tool invocation is authorized against defined MCP policies—all within the isolated environment. This provides auditability and zero-trust security without external dependencies. As of the verification date, public documentation for Temporal and Restate does not list native MCP authorization; plan for additional infrastructure.