Stored on this Org -- the shared default every Project uses unless it registers its own (Project settings, once one is selected). Not encrypted at rest yet. Grok-Build signs in with SSO; the others take an API key.

A pack's signature is only honored if the key that signed it is trusted here. Trusting a signer authorizes everything they'll ever publish -- there's no per-pack revocation. Gated on Create at this root Org.

Paste a signed pack (the output of pinon-sign-pack sign). Reinstalling the same pack id replaces its rules/entry kinds rather than duplicating them. Same root Create gate as trusted signers.

Creates a child of the selected Org. It then becomes the selected Project in the header. Name is required so the picker has something to show. Type is the same kind as this Org's existing children, or the pack's project-noun key when this Org has none.

Which packs apply to this Project. Base is always on. Everything else under this Project -- Teams types, board kinds, Consult roles, repos -- follows these checkboxes. Packs are installed on the Org; this only chooses which of them this Project uses.

Teams under the selected Project. Type comes from enabled modules, not a free-text kind. Holders are work cards on the board, not folders here.

Who holds each access level on this Project. People this page has already seen, plus LLM providers registered on this Project or the Org (labeled by which). A Project's own registration takes precedence over the Org's. LLM options appear only on roles whose rules name a Project or child kind. Org-only seats (Owner) are assigned under Users.

Stored on this Project -- takes precedence over the Org's if both are set. Register one here when this Project bills its own key; leave it empty to keep using the Org's. Not encrypted at rest yet. Grok-Build signs in with SSO; the others take an API key.

One SSH identity for this Project. Add the public key on the forge, then add git URLs below.

Copy a command into a terminal to download the host binary from this instance and join the selected Project as the signed-in user. This is not a click-to-download in the browser. The host needs a container engine (Docker / Docker Desktop). The command uses your session token — it does not mint a new actor and does not bake a token into the bytes.

Creates a person who can sign in with email and password. No invite email is sent yet -- tell them the password out of band.

Who can administer this Org (Owner, and anything else the pack grants at this level). The access level is free text a pack's Rules give meaning to. An LLM cannot hold this seat.

Lighting for this browser. Saved on this device, not on the org.