AI security

Boundaries around canvas-aware AI reads and mutations.