Intents carry identifiers only. Templates are allowlisted and escaped. Sensitive workflows use generic “open CASA securely” wording. Secrets rotate with overlap; webhooks require signatures. No contact lists in the browser.