Back to the blog
Security & privacy

Keeping connected documents safe as information changes

Define sources, audiences, review, and permissions for connected Skybits workflows as information and collaborators change.

When an agent keeps several items in sync, decide what information is allowed to flow into each output. A shared workflow can connect sources that have different audiences, and the most sensitive source should not silently define the content of every destination.

Consider an internal project assessment, a client update, and a public summary. All three may describe the same project. They should not necessarily include the same names, financial details, or operational risks.

Define the transformation and its audience

Write down the authoritative sources and the purpose of each output. Specify what belongs in the client version and what should remain internal.

For example:

Update the client summary from the approved milestone section. Include dates and decisions relevant to the client. Exclude internal staffing notes, unrelated commercial terms, and unsupported estimates. Flag conflicts for a person to resolve.

A relationship label helps explain how items connect. It does not replace those content boundaries or create authorization to disclose every source detail.

Separate sync from sharing

The current Guide describes sync relationships and sharing as different concerns. A workflow needs the relevant item access; connecting items does not justify expanding their audience automatically.

Check direct grants, shared folders, links, and embedded items for every output. Be especially careful when a source contains information that an agent is allowed to read but a destination's recipients should not receive.

An agent's permission to read a source is not, by itself, a decision to publish its contents into a broader destination.

Understand the coordination described in the Guide

Skybits' current documentation describes an agent claiming a sync job, working on it, recording the exact revisions incorporated, and releasing the claim. It says that later edits remain marked for another pass, and that an agent can hand a conflict back with a written reason.

These mechanisms address coordination and freshness. They do not guarantee that an output is factually correct or that its audience is appropriate.

The Guide also describes invalid relationships being reported when access is lost, an item is trashed, or a member is frozen. Confirm sync availability and behavior in your build.

Review each output in its own form

A synchronized memo still needs suggestion review. A synchronized spreadsheet still needs cell and formula review. A canvas needs source and preview review.

Do not treat a successful run or an up-to-date status as acceptance by the person responsible for the content. Define who checks the result and when it may be distributed.

For a recurring workflow, also decide what happens when the reviewer is unavailable. Pausing or reducing the scope can be better than allowing a broad update with no clear recipient check.

Recheck the boundary when circumstances change

Review the workflow when a client leaves, a new folder is shared, the source changes audience, an agent connection changes, or new fields are added. A previously safe instruction may become incomplete as the source grows.

Inspect a few representative changes after a material update. Look for new categories of information appearing in the destination and sources that are no longer authoritative.

Start with one relationship

Pilot a small source-to-output workflow with a named reviewer. Use sources approved for the destination's audience. Observe how errors, access changes, and conflicting facts are handled before connecting more items.

Next step: Read the Skybits Help, then write a source-and-audience rule for each output. Confirm the required feature is available in your build.

Try your first doc now

Start now