Everything: the API, the gateway, memory, sandboxes and the web UI, as Docker Compose services or Kubernetes pods. Model calls go to the providers you configure, and nowhere else.

Yes. The cliproxy service wraps a signed-in subscription as an OpenAI-compatible endpoint. Costs are recorded as unknown, never guessed.

It stops, keeps every artifact and event, and you get a notification with the reason. Start a follow-up task from it and the context carries over.