Security
Data separation and access rules for public docs and workspace memory.
IncidentFlow separates public product knowledge from private workspace knowledge.
Public Knowledge
Public knowledge is built from content/docs. It can include product setup,
integration guidance, MCP tool descriptions, and API documentation.
It must not include customer data, tokens, private URLs, internal incidents, or workspace-specific operational notes.
Workspace Knowledge
Workspace knowledge includes incidents, RCAs, postmortems, runbooks, service knowledge, and deployment notes.
Every workspace memory record is associated with one workspace. Workspace memory queries are filtered by the authenticated workspace and cannot be redirected by passing an arbitrary workspace id.
MCP Safety
Read-only tools are marked as read-only. Memory write tools are idempotent where possible and are limited to storing operational knowledge in workspace memory.