Google Jules data and execution remain protected even when JULES_API_KEY is configured server-side.
Local drafts are saved to IndexedDB and restored after reload.
No browser API key is requested or persisted; local drafts remain fully usable without one.
GitHub workspace data and cross-site actions require protected API access. Unconfigured execution is reported as unsupported, never as a created handoff.