Anyone who has it can read the visible prompts, responses, paths, and tool results, which may contain secrets; a full-control link can also prompt, interrupt, and answer pending interactions; and an owner link can additionally change the permission mode and create sessions. A full or owner link can also add a prompt’s attachments to the project, and in a project lobby read, upload and remove the project’s files. Frames are sealed end to end with a key that lives only in the link; the relay sees ciphertext. This tab keeps the link for as long as it is open, so a reload lands back in the room; closing the tab forgets it. Enabling notifications stores the link in this browser so an installed app can reconnect. It is cleared after this viewer observes the room end or gives up reconnecting; otherwise it may remain until this link is opened again or site data is cleared. Links to rooms you requested or were offered are kept in this browser too, so a reload does not lose them, and so is a lobby link once opened; the project menu lists them, Manage rooms forgets one, and they die with the host’s share regardless. Browser history names rooms but never holds their links.