Access boundary: Authenticated browser session.
Implemented; invitations require separately configured delivery.
Surfaces: Authenticated browser; invitation emails are authored in English.
Read the engineering guide · All features
Capabilities
- Four human membership roles with independent supervisor approval/reporting options
- Member management, permission changes and atomic access revocation
- Last-administrator protection
- Individual/CSV invitations with batch preview and confirmation
- Verified-email acceptance, expiry and invitation revocation
- Bounded browser-only responsible contacts filtered by current workshop membership
- Login email distinguishes members with the same name; effective permissions stay readable
- Sensitive preparations are visible to their creator and current approvers; operators and observers gain no general access to other preparations
- Sensitive approval and recipient/account association require a browser under the current document policy; OAuth confirmation follows recorded browser evidence, with no expert-mandate substitute
- Workspace roles grant no access to another person’s vault; a recipient gains no membership in the sender’s workspace