A clean door into HQ for the crew.

OAuth protects the entrance. HQ remains the place. This gateway only gives trusted collaborators a supported way to knock, identify themselves, and use the tools Rob approved.

StatusRead-only door readyActive

ChatOAuthHQ services

01 / TRUST

Rob stays the principal.

Chat, Codex, and Copilot are credited collaborators. Every action keeps the authenticated human, client, actor, scope, and timestamp separate in the audit trail.

02 / BOUNDARY

The front door stays locked.

The browser-protected HQ entrance remains untouched. Agents use a separate machine-safe route with its own resource, tokens, revocation, and audit history.

03 / PERMISSIONS

Nothing gets a skeleton key.

hq:readfirst proofhq:writeheld backhq:filesheld backhq:adminheld back