Security and privacy

Rodyne is designed for communities where identity, permission, and provider state can change between request and execution.

​

Tenant and session boundaries

• Every staff request is authenticated and scoped to a workspace.
• Staff, Cnect, Connect, and Member Dash sessions are distinct audiences.
• Host-scoped secure cookies are used in production flows.
• Sensitive personal API responses are private and non-cacheable.
• Session rotation and revocation remain available in account management.

​

Least privilege

Capabilities are checked in the API, not only hidden in the interface. Discord role grants use current provider membership. Native Discord permission and hierarchy checks remain separate from Rodyne access.

​

Durable work and idempotency

Provider writes use durable jobs and idempotency keys. Expired leases and ambiguous network results do not become automatic success. Rodyne reads provider state before continuing where supported.

​

Audit trail

Configuration changes, approvals, execution, corrections, releases, withdrawals, and repair actions create workspace-scoped audit records. Some operational records are append-only by design.

​

Secret handling

Keep Discord tokens, Roblox keys, Stripe secrets, webhook URLs, connector secrets, and third-party provider keys in server-side deployment configuration.

​

Member data

Member Dash exposes only reviewed fields and member-safe text through active releases. Cnect provides unlinking and privacy information. Community record requests remain the responsibility of the relevant community administrators, with Rodyne privacy requests available through hello@rodyne.xyz.

​

Responsible operations

• Use canary accounts and low-risk records for first live tests.
• Do not infer provider success from a queued job or a successful HTTP response.
• Do not treat third-party safety signals as automatic moderation findings.
• Verify the actual provider object before retrying an uncertain write.
• Narrow access promptly when responsibilities change.

​

Guided walkthrough

The screenshot above is from the live Rodyne product. Use it to orient yourself, but rely on the current record state and live provider checks when operating the workspace.

​

Operating procedure

​

Acceptance checks

​

Failure recovery

For suspected exposure, revoke the affected credential or session first, preserve the audit evidence, replace the secret, and verify that old access no longer works. Avoid copying the leaked value into the incident record.

​

Continue the workflow