Who can do what
Three roles, plus a setting for how much the AI does before it stops and asks you.
- Owners hold billing, invites and API tokens
- Builders author playbooks, connectors and secrets
- Members run what they are granted and author nothing
- Ask mode makes the AI propose every action for approval
- Approval gates live in the workflow, so no route around them