Sign in and Profile ownership
Use an email Magic Link/OTP or Google on the TLDT sign-in page. A successful sign-in provisions the owner Profile and lets you claim one public username. Owner pages under/admin require authentication. A published username page and an active saved-share link are public to anyone who opens them.
Public visitors can use only the active published projection for the username or the visitor-safe snapshot addressed by the share token. They cannot choose another Profile id, storage path, or private source.
Privacy boundary
Public serialization excludes:- Private Memory and editable drafts;
- source paths and internal citations;
- prompts, policy reasons, and tool traces;
- provider metadata and credentials;
- tenant identifiers and internal storage authority.