Boundary: cp2 NEVER mutates the supervault allowlist (those edits are strictly manual in the Supabase dashboard on prasoon2). cp2 blocks access via
ops.access_grants + per-device toggles. Session revocation writes to KV blocklist.
Open access requests ops.access_requests · approve / deny
Loading…
Devices ops.access_devices · click enable/disable to flip
Loading…
Grants ops.access_grants · principal → target
Loading…