Verify access before inviting participants
Secrets
Never share passwords, API keys or tokens with participants or the support bot.
Isolation
Shared production access requires supported row-level permissions or workspace isolation. Licensing requirements must be respected.
Recovery
Before a change: take a database backup and volume snapshot, then test restoration in a separate database.
Invitations
Invitations must be personal, single-use and time-limited. Enable the adapter only after verifying HTTPS, isolation and backup recovery.