SETTINGSIMPLEMENTED
Control boundaries
Visible defaults for privacy, publishing, location, and high-risk actions.
DEFAULTS
Operator policy
Private operationsLocal and tailnet services remain private by default.
PASSMap precisionArea-level display. Exact location requires explicit opt-in.
AREAPublish gateHuman approval required before any external post or artist delivery.
REQUIREDCredential boundaryBrowser clients receive safe state only, never broadcaster or bot credentials.
IMPLEMENTEDDANGEROUS ACTIONS
Unavailable by design
Live scene switching, public exposure, credential rotation, and publishing
These actions require an authenticated server adapter, an explicit approval step, and a durable receipt.