Demo Director is designed to minimize the credentials and sensitive product data exposed to agents. Passwords, OTPs and provider secrets should never be passed in chat prompts or MCP tool arguments. Authenticated capture is designed around a scoped Capture Bridge where the user signs in directly.
Capture retention, redaction and deletion controls will be explicit workspace settings. Production storage should use isolated prefixes, encrypted transport/storage and short-lived signed output links.
Provider-generated media should retain provenance/provider metadata and is never treated as evidence of product behavior merely because it appears in a film.