Platform

The fixed role set across organization, team and project — and the explicit grants that make access real.

One key, one project — issuing rules, reveal-once secrets, rotation, spending limits and expiry.

The organization is the isolation boundary — one login can belong to many, and nothing crosses between them.

Where enforcement happens, how credentials and provider keys are stored, and what happens to the data you send.