Private work. Bounded authority.
Understand the controls around your workspace, events and selected outputs.
Protected workspace access.
The hosted application uses Cloudflare Access identity. Server-side membership checks scope workspace reads and writes. Client roles use a separate read-only projection rather than the operator snapshot.
Authenticated work events.
Signed ingestion verifies exact request bytes, timestamps, nonces, schema, payload size and credential scope. Duplicate event IDs cannot silently replace prior work.
Selected output access.
Output retrieval checks the workspace and, for clients, the current selection. Reviewed text files are pinned by content digest. Events cannot turn a provider path into an arbitrary download.
Read-only public demonstration.
The demo uses a dedicated scoped reader and an expiring reviewed selection. It exposes no raw workspace snapshots, private logs, credentials or action controls.
Questions about access.
Use connection assistance for non-sensitive setup questions. Never put credentials or sensitive incident records in a public form. No certification or service-level commitment is stated.
Ask for assistance