Create New ProjectOrg Admin / Owner
New projects start in non-breaking Monitor governance mode.
Engineering Tasks
Read-onlyExecutive Stakeholder Digest
Cryptographic Evidence Ledger
Separates unverifiable AI claims from verified Git SHAs, Ed25519 signatures, and governance compliance verdicts.
AI Coding Governance Policies
Evaluated server-side on every sync/push before context is persisted.
Allowed AI Harnesses (leave all unchecked to allow all harnesses)
Protected Invariant Constraints (one required substring per line — AI agents cannot silently drop these)
Recent Policy Violations & Flags
Workspace & Role Summary
Members & Role Assignments
Read-onlyRole × Permission Governance Matrix
Authoritative server matrix enforced by authorize() across every API route. Last-owner demotion/removal and privilege escalation are blocked server-side.
Scoped Access Tokens (CLI / CI)
Token permissions are strictly bounded by the intersection of the creator's role and the token scope.
Active & Revoked Tokens
API Key / Platform Key Override (Testing)
Connected Machines & 1:1 E2EE Pairs
Read-onlyRegister 1:1 Machine Pair
Free plan allows 1 registered pair per project (Computer A → Computer B).
Tamper-Evident Audit Log (SHA-256 Chain)
Every login, token event, role update, policy change, push, pull, and denied action is cryptographically hash-chained.