Docs v0.1

Roles & tokens

Access is a single capability model that governs people and machines alike.

Roles are named bundles of capabilities you assign to users.
API tokens are first-class principals with their own scopes — not a person's login reused.
Granting is subset-only: you can only grant what you already hold.
It is deny-by-default, and errors are non-enumerating — a tool you may not use looks the same as one that does not exist.

The same model applies to the admin, the API, and the agent surface.