Managed BYOK model defaults let organization admins set custom models as defaults for sessions and subagents in Enterprise Controls. The explorer droid now accesses all read-only tools including command execution, web search, and MCP tools, with file edits blocked. Mission model settings let you pick which models and reasoning defaults each mission uses.