Let an invitation open only its own scope.
Person, team, Room and Wall access are different decisions. Someone can join shared work without seeing the preparation Wall or all of the team’s content.
The Room owner, Designer, participant and observer have different responsibilities. A management role does not automatically grant content access; where necessary, a separate limited and auditable access route is considered.
Keep source authority with the source.
Seeing a record or writing a note about it in visual work does not grant the right to change it in the real system. Source-record permissions, validation and business rules belong to that system.
Knowledge created in Xohre also has its own ownership and access scope. Source rights and rights over native knowledge are not collapsed into one permission.
Understand the scope of going back.
Wall persistence, versions and activity history help people continue working. Undoing a visual step differs from undoing an operation already committed in a source system.
Data flows, providers and retention conditions described for a release must be considered together. Keeping an asset store in a particular region does not establish that every data flow stays in that region.