# App Composer: overview LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified ## 00:00:00.000 · 1 · Get Ready and current authority Get Ready observes this signed-in workspace. Creator permission and current ownership permit policy setup; the observation grants no authority. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · app-user · captured still / edited hold 6s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: ready-role10-team-a-request.png, SHA-256 c3876404f80ac701afeaaae46dabc6892c650ccae3ffb101d2383d5fa1c00a22; genuine still held 6s. ## 00:00:06.000 · 1 · Get Ready and current authority Get Ready observes this signed-in workspace. Creator permission and current ownership permit policy setup; the observation grants no authority. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · app-user · captured still / edited hold 4s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: init-role10-team-a-request.png, SHA-256 7f1f5125b8708c8337de307d5931713a93a0b4ace643f7c3e96d83d9ba39833f; genuine still held 4s. ## 00:00:10.000 · 1 · Get Ready and current authority Get Ready observes this signed-in workspace. Creator permission and current ownership permit policy setup; the observation grants no authority. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · owner · normal speed / source 16.000–20.000s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: native-owner-25dc7589-zzME0e.webm, SHA-256 fbd01fba0a12fc184d3e8f2ef2509f8335c0a204a627af21e15fb8ecfb61da4a; normal-speed cut 16–20s. ## 00:00:14.000 · 2 · Two teams and role-10 delegation Two teams retain different requests, stacks and app resources. Explicit editor delegation enables self-service while the member stays global role 10. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · app-user · normal speed / source 20.000–24.000s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: native-app-user-25dc7589-zzME0e.webm, SHA-256 5e1c9a1c96613af78e86c6219b7d15f5347c011eb39342ec9ed3667ed930648a; normal-speed cut 20–24s. ## 00:00:18.000 · 2 · Two teams and role-10 delegation Two teams retain different requests, stacks and app resources. Explicit editor delegation enables self-service while the member stays global role 10. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · creator-b · normal speed / source 24.000–28.000s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: native-creator-b-25dc7589-zzME0e.webm, SHA-256 8e12ea201341cdd3078fd93197e52402fb00480b1ee22970fd32f9559da66551; normal-speed cut 24–28s. ## 00:00:22.000 · 2 · Two teams and role-10 delegation Two teams retain different requests, stacks and app resources. Explicit editor delegation enables self-service while the member stays global role 10. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · app-user · captured still / edited hold 2s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: team-a-role10-members-complete.png, SHA-256 764d01e6d62a9f12cc78f3ae340dff5dda2f17a124c5580e9e092694378090b6; genuine still held 2s. ## 00:00:24.000 · 3 · Private canvas, moderation and media The native canvas submits fictional content through the exact app grant and named Guestbook v2 service. Its pending media remains private. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · app-user · captured still / edited hold 10s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: team-a-role10-postcard-preview.png, SHA-256 4a2f480e3ca7b947b498fdf86d6368683fecb4d43554327ff2b4e33b8fdec13a; genuine still held 10s. ## 00:00:34.000 · 3 · Private canvas, moderation and media The authorised moderator approves, hides and reapproves the same postcard. Anonymous media follows 404 → 200 → 404 → 200; public contributions stay closed. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · creator-a · normal speed / source 52.000–64.000s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: native-creator-a-25dc7589-zzME0e.webm, SHA-256 2b0b2d5ce9e26d653ca5daf9359d8908ca60a7c66015ad7c97fe7b85c5b3ac43; normal-speed cut 52–64s. ## 00:00:46.000 · 4 · Content-preserving update and Team B control Team A's compatible title update retains its request, stack, resource, postcard and media. Team B is checked unchanged in this same run. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · app-user · normal speed / source 68.000–72.000s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: native-app-user-25dc7589-zzME0e.webm, SHA-256 5e1c9a1c96613af78e86c6219b7d15f5347c011eb39342ec9ed3667ed930648a; normal-speed cut 68–72s. ## 00:00:50.000 · 4 · Content-preserving update and Team B control Team A's compatible title update retains its request, stack, resource, postcard and media. Team B is checked unchanged in this same run. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · anonymous · captured still / edited hold 5s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: team-a-public-updated-content-preserved.png, SHA-256 249384288fbab2a290853418e71df638c2eb3523b2fd8f332ac1fcad0d6753fa; genuine still held 5s. ## 00:00:55.000 · 4 · Content-preserving update and Team B control Team A's compatible title update retains its request, stack, resource, postcard and media. Team B is checked unchanged in this same run. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · anonymous · captured still / edited hold 4s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: team-b-public-app.png, SHA-256 68cbc26c7f434a2326d3553944b35afde710f9cf0f7231c42e2d38d3be80f3d5; genuine still held 4s. ## 00:00:59.000 · 5 · Denials and the recovery contract Cross-team access, ungranted app actions and role-10 operator actions are denied. The sensitive-data request creates no stack or app resource. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · app-user · captured still / edited hold 8s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: team-a-role10-members-complete.png, SHA-256 764d01e6d62a9f12cc78f3ae340dff5dda2f17a124c5580e9e092694378090b6; genuine still held 8s. ## 00:01:07.000 · 6 · Exact limits and source receipt This local run proves the recorded native path only. Production SSO, provider permissions, regional storage, full restore, retirement and the incident foundation remain unqualified. LOCAL DEMO · workerd/native sessions · virtual passkeys · fictional synthetic data · public edge unqualified · anonymous · captured still / edited hold 8s · recorded inspection 2s/snapshot · receipt b3cd58948625f9746d16b4ee78f7b360a21b4a5fc1346f8983fdb52cbbdd116a Composer 25dc7589f7a92d5ba22eb44c49b9a774991799a3 · Guestbook e097e4dd46abe5dd49a0ee1209276cc506e601fa · Linkarooie 9e166d3c3dcc9d3746ba1680b9f74015c0b521cb Team A · workspace 09981451-5427-41f5-b7e9-989f5fbdf648 · request a108ef66-c3e3-407f-90b5-1e1473449e06 · stack a108ef66-c3e3-407f-90b5-1e1473449e06 · resource 87952ca6-598f-4c9b-9b7e-d1f9153783e7 Team B · workspace fa1f642b-5def-4f45-8c0c-9e906c3dc391 · request 931332e1-b22d-4385-ac8f-c3e204988e0f · stack 931332e1-b22d-4385-ac8f-c3e204988e0f · resource 9fc78b5e-bec0-4996-a69e-b9b4ee67b338 Source: team-b-public-app.png, SHA-256 68cbc26c7f434a2326d3553944b35afde710f9cf0f7231c42e2d38d3be80f3d5; genuine still held 8s.