Members don't work on your phone. Each squad gets its own small computer: a sealed workspace with no admin rights and no DNS, whose only way out is a proxy that checks every request. On the web, that is everything but the sites you've blocked. For your connected accounts, it is reads only, with the sign-in added by the proxy, so no password or token is ever inside.

The browser is a separate computer with none of your files in it, and what a page says is information to a member, never an instruction. The chat shows you the result, never the code; the run is in the Log.

In the app: Account → What members may do → Sites members may never visit

Every ability a member has is a switch with three positions: without asking, asks first, not allowed. Looking things up runs on its own; changes ask first, and so does anything no rule covers.

Some things can't be set to “without asking” at all: the button that buys, books or sends, sending your files to a website, changing or removing calendar events, adding a specialist. Members never type a password, a card number or a code; when a site needs one, they hand you the page. You can also list sites members may never visit.

In the app: Account → What members may do

Some things always ask, whatever the rules say: spending your money, booking or ordering, sending anything as you, changing something that matters, opening or unlocking anything. Transferring money isn't on offer at all. On the web, you see the page and what the button does before you say yes. A yes to a payment or a door asks for Face ID or your passcode.

You pick the card, never the member, and the card details go to the payment provider, not to Squad. The one exception to asking is an allowance you set up yourself: one member, one shop, a total, a date it stops, never more than a month out. It draws down as it's spent, and one switch stops them all.

In the app: Account → Security → Buying without asking

Everything a member does outside the chat is written down: what, who did it, when, and what allowed it, a rule you set, an allowance, or your yes. Refusals, expiries and failures are in there too, and any message can be asked “Why this?”

Under the Log is a sealed record: every entry is hashed with the one before it, and the chain is checked from the first entry whenever the Log is loaded, so a line changed after the fact would show, and the app says so. The record lives apart from your threads, so deleting a conversation doesn't erase what was done in it, and it holds no model's reasoning, only decisions and references.

In the app: Work → Log

Members remember what you tell them so they don't ask twice, and all of it is on one screen: each fact, who learned it, and the message it came from. Correct a fact, forget it, or turn learning off so nothing new is kept.

Off-limits rules go further: name a thing, and no member can keep a memory that mentions it, summaries leave those sentences out, and what's already remembered about it can go too. A new fact that contradicts an old one is shown to you to settle. Saving and forgetting are recorded, so nothing is remembered or forgotten quietly.

In the app: Account → What Squad knows

On a shared phone, one switch puts Face ID (or Touch ID) in front of what the squad knows, the Log, private threads, export and deletion. Any thread can be made private: from then on only the members you pick read anything new in it, the lead included, and a member that isn't admitted is never handed the thread, nor is the model behind it. One that already read it still remembers it, and the app says so.

Everything Squad holds about you downloads as one file: squads, threads, memories, tasks and every action taken for you. Deleting your account asks you to type DELETE, then erases every squad you own, at once and for good.

In the app: Account → Privacy & data