In Worksong
- Approvals pause consequential actions. See Approvals.
- Secrets are used by Agents but never shown to them. See Secrets.
- Credentials you connect are never returned by the API. Browser pages do not receive server credentials.
- Spend limits per Agent and per account.
- Audit lists what Agents did and what you approved.
In Work
- Tenant isolation: every row belongs to one organization and the database enforces it.
- Authority, gates and limits decide what a Member may do. An API token is a credential of an existing Member.
- Audit is append-only and written before a change happens.
- Public forms write through a restricted intake member.