Broad context,
held to who may read it.
An agent working for someone has that person's access and none of its own, and in a channel only what everyone there shares. One access model sits under every surface, so a summary or an answer carries the access of what it came from.
Security
What it does
Every caller is someone
People sign in with Google, agents and scripts with tokens, and each request is settled once as who it is for. Teams are kept apart, and joining one takes an invite.
Normalized to the room
Scout answering in #general reads only what everyone in #general may read, so a document from the leadership folder never surfaces in a room that cannot open it.
Team or Private
Every channel, folder, document and project is Team by default or Private to the people and groups added, at a level from view to manage.
Asks before it widens
Anything that would widen access or delete is proposed to the person the agent works for, and done only when they say so.
Agents without secrets
An agent's sandbox holds placeholders, and a keeper swaps the real credential in only for the hosts it belongs to.
Every act attributed
Each change carries who made it and, for an agent, who asked. Grants, roles and app calls are kept in an audit log.
What changes
What it changes
for your team and its agents
Agents you can let into every channel
Since an agent shows nobody what they could not open themselves, the team can add it to every channel without first deciding what it might repeat.
Answers for your security review
Who can see what, who did what and on whose behalf are questions with recorded answers, for every agent as for every person.
Clean exits
Removing someone ends their tokens and live sessions at once, and agents acting for them lose that access with them.
Related
It works
with the rest of Together
