$ROUTER is a gem!
I noticed that Solrouter's privacy model differs depending on the feature being used. Regular chat and the sealed inference path protect prompts with client-side encryption and TDX, but the Notion and GitHub connectors in Agent mode currently run outside the enclave. It would be useful to make this distinction especially prominent in the UI before users connect private workspaces, perhaps with a per-tool "sealed/unsealed" indicator. That would make the privacy guarantees easier to understand when switching between agent features.