Capabilities at a glance
Every surface in Kaizen, who it is for, and the setting that controls whether it appears. If something in these pages is missing from your deployment, this table names the flag to ask your administrator about.
Availability flags are resolved server-side and re-checked by each backend route. A hidden navigation item is a convenience, never the access control.
A flag requests availability. Kaizen exposes new work only after every server-owned prerequisite is ready.
Core surfaces
| Surface | Audience | Flag | Default |
|---|---|---|---|
| Search | Member | always on | — |
| Chat | Member | MEMBER_API_ENABLED | on |
| Streaming answers | Member | MEMBER_CHAT_STREAMING_ENABLED | on |
| Chat history & Chats library | Member | always on | — |
| Delete a chat | Member | MEMBER_CHAT_DELETE_ENABLED | off |
| Answer feedback | Member | MEMBER_CHAT_FEEDBACK_ENABLED | on |
| Agent pipeline pane in model and run settings | Member; selection restricted to an allowlisted Kaizen administrator | AGENT_PIPELINE_SELECTOR_ENABLED plus static allowlist and live Kaizen Admin authority | off; disabled Tomo |
Knowledge
| Surface | Audience | Flag | Default |
|---|---|---|---|
| Documents (upload & ask) | Member | DOCUMENT_IMPORT_ENABLED | off |
| Document preview | Member | MEMBER_DOCUMENT_PREVIEW_ENABLED | on |
| Document export | Member | DOCUMENT_EXPORT_ENABLED | on |
| Collections | Member | MEMBER_COLLECTIONS_ENABLED | on |
| Hybrid retrieval | — | HYBRID_RETRIEVAL_ENABLED | on |
| Query expansion | — | SEARCH_EXPANSION_ENABLED | off |
| Fuzzy fallback | — | SEARCH_FUZZY_FALLBACK_ENABLED | on |
| Contextual RAG at ingest | — | INGEST_CONTEXTUAL_RAG_ENABLED | off |
Collaboration
| Surface | Audience | Flag | Default |
|---|---|---|---|
| Shared chat | Member | SHARED_CHAT_COLLABORATION_ENABLED | on |
| Projects | Member | PROJECT_WORKSPACES_ENABLED | on |
| History search | Member | CHAT_HISTORY_SEARCH_ENABLED | on |
| Indexed history retrieval | — | CHAT_HISTORY_INDEXED_RETRIEVAL_ENABLED | off |
These four have a dependency order. See Feature flags & rollout before changing any of them.
Agents & authoring
| Surface | Audience | Flag | Default |
|---|---|---|---|
| Agents library | Member | MEMBER_AGENTS_ENABLED | on |
| Agent Studio | Member | AGENT_STUDIO_ENABLED | on |
| Agent bundles | — | AGENT_BUNDLES_ENABLED | on |
| Demo Builder staff workflow | Kamiwaza staff | no dedicated flag; ships as an agent bundle | on with bundles |
| Packages | Member / Admin | AGENT_PACKAGES_ENABLED | on |
| Prompts | Member | MEMBER_PROMPTS_ENABLED | on |
| Multi-step Prompts | Member | MEMBER_PROMPT_CHAINS_ENABLED | on |
| Agent routing | — | AGENT_ROUTING_ENABLED | on |
| Orchestration (delegation) | Member | AGENT_ORCHESTRATION_ENABLED | on |
| Parallel orchestration | — | AGENT_ORCHESTRATION_PARALLEL_ENABLED | on |
| Evaluator-optimizer pattern | — | AGENT_ORCHESTRATION_EVALUATOR_OPTIMIZER_ENABLED | off |
| Tool discovery | — | AGENT_TOOL_DISCOVERY_ENABLED | on |
| Federated cluster tools (call a paired Kamiwaza cluster as a linked identity) | Member / Admin | FEDERATION_TOOLS_ENABLED plus the FEDERATION_SHARED_IDP setting | off |
| Generic Kamiwaza Core/MCP tools | Member / Admin | KAMIWAZA_TOOL_BROKER_ENABLED | on; exact tools still opt-in |
| Closed Kamiwaza SDK tools | Member / Admin | KAMIWAZA_SDK_TOOLS_ENABLED | on |
| External OpenAPI source management and tools | Member / Admin | KAMIWAZA_EXTERNAL_CAPABILITIES_ENABLED | off |
| Cross-origin external schemas | Member / Admin | KAMIWAZA_EXTERNAL_CROSS_ORIGIN_SOURCES_ENABLED plus source consent | off |
| External query-string authentication | Member / Admin | KAMIWAZA_EXTERNAL_QUERY_AUTH_ENABLED | off |
| Remember external credentials in DataHub/Catalog | Member / Admin | KAMIWAZA_CREDENTIAL_REMEMBER_ENABLED | off; explicit action only |
| Workspace, member, agent, and Chat approval defaults | Admin + Member | no dedicated flag | Never ask; admin configurable |
Execution
| Surface | Audience | Flag | Default |
|---|---|---|---|
| Native Desktop input authority | Member on native Desktop | DESKTOP_INTERACTIVE_AUTHORITY_ENABLED | off |
Code sandbox (run_code, persistent kernels, hash-bound workspace editing) | Member | SANDBOX_ENABLED | on |
| Runnable artifacts | Member | ARTIFACT_RUN_ENABLED | on |
| Reviewed Artifact renderer packs | Member / deployment operator | Environment-only ARTIFACT_RENDERER_PACKS_ENABLED with an image-installed exact digest | off |
| Browser sessions (a live web page in the pane) | Member | SANDBOX_BROWSER_SESSIONS_ENABLED plus a TURN relay | off |
| Sandbox network egress | — | SANDBOX_EGRESS_ENABLED | on, public addresses only |
| Tasks & scheduling | Member | TASKS_ENABLED plus platform readiness | off |
| Per-task approval mode and durable approval waits | Member | TASKS_ENABLED plus platform readiness | off |
| Chat-managed background jobs | Member | TASKS_ENABLED plus platform readiness | off |
| Exhaustive Library corpus Tasks | Member | TASKS_ENABLED plus platform readiness | off |
| Worker queue | — | WORKER_QUEUE_ENABLED | on |
| Separate document queue | — | DOCUMENT_WORKER_SEPARATE_QUEUE_ENABLED | off |
Native Desktop input authority requires the private native bridge, its versioned bind, refresh, and release protocol, and authenticated native admission. Stored inputs do not transfer process-local authority to another replica. See Native Desktop input authority for the fixed bridge origin and admission prerequisites.
Tasks ship off: this release holds them, with chat-managed background jobs and Library corpus Tasks, for a later qualified release. A default installation shows members no Tasks surface. An administrator may turn them on, but that is an operator choice outside this release's qualification, not a supported configuration of it. When on, the flag alone still cannot grant authority. Kaizen accepts only one complete server-side readiness decision: all 20 v1 capability families, every required platform component, a healthy workload-attestation profile, compatible model and dataset resource guards, a current report, and the explicit Kaizen rollout must all agree. A read-only or otherwise partial platform is unavailable.
The rail, direct route, chat tools, scheduler registration, dispatch, queue,
workers, model calls, credential use, and resource effects all close from that
same decision. If any dependency becomes unavailable after launch, new work
closes immediately while existing definitions, run history, notifications,
approvals, and audit evidence remain readable.
A dependency failure is visible as a healthy, inert held scheduler state; it
does not take chat, Library, or other member surfaces offline.
Browser sessions ship off in this release, because their media is
relay-only and Kaizen does not ship the TURN relay they need. With the flag off,
members see no browser pane and agents are offered no browser tools. An
administrator who has a relay can set SANDBOX_BROWSER_SESSIONS_ENABLED=true.
The flag is necessary but not sufficient: a session
also needs a signed egress grant, a worker image carrying the browser runtime,
enough worker memory, and operator-configured TURN relay URLs (the relay secret
is derived from the deployment's field key unless an operator overrides it).
It is refused outright rather than degraded when any prerequisite is absent.
The third-party page executes inside the deployment's own boundary, so read
Feature flags & rollout and
Isolation boundaries. Members get the task-level
guide in Browser sessions.
Efficiency
| Surface | Audience | Flag | Default |
|---|---|---|---|
| Member compression settings | Member | MEMBER_COMPRESSION_ENABLED | on |
| Tool-result compression | Member | MEMBER_TOOL_RESULT_COMPRESSION_ENABLED | on |
| Plain-speak responses | Member | MEMBER_PLAIN_SPEAK_COMPRESSION_ENABLED | on |
| Prompt trim | Member | MEMBER_PROMPT_FLUFF_COMPRESSION_ENABLED | on |
| Context budgeting | — | CHAT_CONTEXT_BUDGET_ENABLED | on |
| Prompt cache | — | PROMPT_CACHE_ENABLED | off |
| Speculative prompt cache | — | SPECULATIVE_PROMPT_CACHE_ENABLED | on, but needs the prompt cache |
| Warm compaction candidates | — | CONTEXT_COMPACTION_WARM_CANDIDATES_ENABLED | on |
An availability flag being on does not opt a member in. Both compression tools default to off per member and stay that way until the member turns them on.
Interop
| Surface | Audience | Flag | Default |
|---|---|---|---|
| A2A proof of concept | Admin | KAIZEN_A2A_POC_ENABLED | off |
| A2A discovery / inbound / outbound / send | Admin | KAIZEN_A2A_*_ENABLED | off |
| Config store | Admin | CONFIG_STORE_ENABLED | deployment-set |
| Federated cluster tools (link, read, write) | Member; federations listed by Admin | FEDERATION_TOOLS_ENABLED plus FEDERATION_SHARED_IDP | off |
A2A is a proof of concept intended for isolated deployments. Read A2A & remote agents before enabling it anywhere else.
embedded browser sessions need the sandbox pool sized for a
browser. The controller ships with SANDBOX_RESOURCE_MEMORY_LIMIT: 4Gi,
clearing Chromium's enforced 1.5 GB floor. A custom lower limit refuses every
session and names that setting. See
Configuration.