docs / access · what each may do
Authorisation
Access is granted per project or per session, never per server. Membership travels with the work, so it holds offline and on a remote VM without a server deciding who gets in.
Mod decides
- Sessions are private by default. Mentioning someone in a session is the grant.
- The relay sends a session only to its participants. Sharing a session shares that thread and nothing else in the project.
- Membership is held in the work itself, signed by its members, not in a server list. soon
- An agent never gets more than the person who runs it.
- Editing documents and running commands on a machine are separate grants.
You decide
- Who is in each project and session.
- What each agent may do: read, write, run, push, send.
- Which actions always wait for a person.