How it works today Live
Who can do what, in which scope, with what check, and whether it is written to the audit log. There are no separate roles inside a workspace yet: every signed-in user of a workspace can do everything listed for it.
| Action | Who | Scope | Approval or guard | In audit log |
|---|---|---|---|---|
| Upload or delete a source | Any signed-in user of that workspace | Their own workspace only | None built in. Deleting a source also deletes the drafts that cited it. | Yes |
| Change a connector or API key | Any signed-in user of that workspace | Their own workspace only | None built in | Yes |
| Generate a draft answer | Any signed-in user of that workspace | Sources already in that workspace | Draft appears only when matching evidence exists. It is a suggestion, not an answer. | No. Each draft records which model, if any, worded it. |
| Send a question and matching sentences to Cloudflare Workers AI | The service, automatically | That one question and its matching sentences | Only when evidence matched. Nothing else from the workspace is sent. | No (see draft record) |
| Use a draft in a customer-facing answer | A person at your company | Their own review | Required: a person must review before sending. Security Desk does not send answers for you. | Not in the app. It happens outside it. |
| Delete all workspace data | Any signed-in user of that workspace | The whole workspace | None built in. It also removes the workspace audit log. | Removed with the data |
| Support or operations access to the database | Shuttlewright staff | Database | No formal access reviews yet | No. The audit log does not record staff views. |
Proposed role matrix Proposal, not built
A structure we would like to build so that who may do what can be set per person. None of this exists today. Today there is no multi-user role system, no single sign-on and no multi-factor sign-in.
| Role | May do | Approval rule |
|---|---|---|
| Owner | Add and remove people, change connectors and keys, delete the workspace | Approve a request from a Reviewer to widen access |
| Reviewer | Approve or edit drafts, mark a packet ready to use | Second Reviewer for answers about security controls |
| Contributor | Add sources and generate drafts | Cannot approve their own draft |
| Viewer | Read approved answers and their citations | None needed. Read only |
Limits that stay true
- Draft answers are suggestions. A person at your company reviews them before they are used.
- No SOC 2 or ISO 27001 certification, and no penetration test report.
- Draft generation is not in the audit log today.
Questions: fuseini.metadata@gmail.com.