Trust
Access follows least privilege.
Record separates workspace administration, agent API access, live-run ingestion, and public review links.
Credential types
- Account session
- HTTP-only, SameSite session used by a signed-in person.
- Agent token
- Named credential containing only selected API scopes. Stored as a one-way hash.
- Run token
- Ephemeral credential limited to one active run.
- Share token
- Revocable access to one recording and its review workflow.
Recording data
Workspace owners control storage, retention, sharing, and deletion. Production deployments should use encrypted durable storage, backups, HTTPS, and an isolated workspace boundary.