Agent publishing security
Validation, signatures, persistence, and non-execution of user code.
#Validation
Zod validates configuration shape; the server verifies benchmark membership, active symbols, and reserved codes.
#Signature
Address and signature must be supplied together. Invalid signatures return 401.
#Storage
Serialized configuration and signature are stored in structured persistence. No secret key is stored.
#Execution boundary
Publishing never executes creator-provided code and never deploys a contract. New definitions remain runtime-disabled.