Security and reliability

Each workspace applies organization boundaries and Row Level Security. Sensitive operations are authorized again on the server.

Access is passwordless, sessions are managed server-side, and roles, memberships, and the active organization determine effective permissions.

Secrets are not distributed to the browser. Server integrations apply verification, idempotency, and origin controls; every release passes versioned builds and tests.

Signed Evidence Pack publication remains unavailable in the current release stage until remote signing, operational keys, and runbooks have been validated in the target environment.

Security reports are received through a dedicated channel. Do not include unnecessary secrets or personal data in the first contact.