Official OAuth only
A provider connection may be enabled only after its supported OAuth flow, scopes, callback and receipt path pass review. No live provider connection is claimed today.
Security boundary
Connect accounts. Never surrender passwords.
Synquestra is being built as a controlled publishing system—not a browser bot, credential-sharing tool or shortcut around provider review.
Server-only provider credentials
Provider access and refresh tokens are prohibited from browser storage, URLs, analytics and client-visible errors. The verified storage boundary must be documented before activation.
Dedicated data boundary
Synquestra uses its own database. RAQOZ, CostGrid and external workspaces do not share product databases.
Least privilege
Workspace and brand membership narrow what a user can connect, approve, publish or analyse.
Human-controlled release
Maker-checker can prevent authors from approving their own work. Assisted publication requires explicit confirmation.
Evidence over assumptions
Material permission, connection, approval and publishing events are designed to leave auditable evidence.
Early-access truth: these are required product controls, not a claim that every backend control or external certification is already complete. Real account connection remains disabled until provider approval, token storage and tenant-isolation tests pass. See the responsible-disclosure guidance for safe reporting.