Walls, keys, and routing that never trusts the message
The hub holds the map of your businesses and a copy of what your bots did. It is built so that a key, a person or a message can only ever reach what it was given.
Walls
Every record carries the member it belongs to. A bot key reaches its own member only; a person reaches the members they were granted. There is no query that crosses the wall.
Keys
One key per bot (
ibb_…) and one per person (ibh_…). Stored hashed, shown once, revocable in one click, rate-limited per key.Routing never trusts the message
Which bot answers is decided by channel, identity and reach, never by what the text asks for. An unknown sender resolves to
UNKNOWNand gets no reply.No secrets in the hub
Bot platform passwords, card numbers and bank details are never stored. The hub records only which account holds access.
Signed links
Files are private. A link carries its own expiry and works for one file; nothing is listable.
Audit
Every change in the portal and every key call is logged with who, what and when.