The Airlock
Connection is not permission.
Nine integration contracts are declared: HubSpot, LinkedIn, Google, Gmail, Instagram, WhatsApp, Facebook, Threads and X. None of them is connected, and the product says so rather than showing a green light.
Declared, not connected
A contract states the auth method, the scopes, the capabilities and the risk of each one. It does not open a socket.
Every public write is HIGH risk
Publishing a post, sending mail, messaging a customer. Irreversible, and spoken in your name. Owner approval, every time.
The state cannot lie
A credential in the environment reaches CONFIGURED. CONNECTED requires a verified exchange, so nothing in this build can report it.
Control sequence: authentication → authorization → scopes →
capabilities → risk → approval → execution → verification → audit.