{"success":true,"worker":"brand-vault-gateway","model":"scoped per-connection tokens; private assets never leave; every access logged"}