Workspaces

A workspace is a shared, multi-account project surface: several accounts each sync their project into one shared event log, and every member's local store becomes the union, distinguished by provenance. A private project is the degenerate 1-member case of the same mechanism.

Roles

Two roles: owner (manages membership, invites, roles, and can delete the workspace) and member (sync = publish). Owners are equal peers; the only guardrail is that the last owner cannot leave while other members remain.

Invites

Owners mint a revocable, optionally-expiring, multi-use invite link. The first invite flips a private project into a shared workspace. Joining is per-account and authenticated — the link grants membership, not raw data access.