Client View
Show selected work. Keep the operational context.
Give an authenticated client a focused read-only view of reviewed work.
Withhold by default.
Select agents, runs and outputs explicitly. The protected projection omits raw events, internal metadata and operator actions.
Use a separate account.
Client permissions are distinct from operator permissions. Access needs a scoped account; there is no anonymous workspace share link.
Deliver permitted outputs.
Selection and content access are checked independently. Reviewed text content is available only where the workspace resolver is configured. Custom domains are not included.