Computers owned by people
A computer belongs to the person who enrolls it. Its home organization remains on the record for compatibility. Availability defaults to every organization the owner belongs to that has Machines enabled, independently of the desktop's currently selected workspace.
Availability alone gives no agent access. The owner grants individual agents, all agents in an organization, or agents in a project access to the computer. Organization grants cover agents created later; project grants evaluate live project membership. Grants retain their capability, folder, command, expiry and approval restrictions. People other than the owner also need a grant.
In This computer, Let all my agents use this computer — always, everything creates one standing organization grant per available organization. It covers every capability the computer offers, unrestricted files and commands, without per-action approval. Turning it off revokes full-access agent grants. Destructive actions and spending still follow the organization's authority policy. Pause and Stop remain available on the computer.
Advanced lists organizations and their agents by name. Organization availability checkboxes control which organizations can use this computer; the home organization remains available for compatibility. Removing another organization ends its leases and cancels waiting commands immediately. An agent still needs a live grant. Removing the owner's membership also prevents that organization's agents from accessing the computer.
The owner changes availability with
PATCH /v1/machines/:machineId/availability and { "orgIds": [...] }.
Every organization must be one the owner belongs to. Changes require recent
authentication or the existing machine-bound presence proof. Grants accept an
orgId from the availability set; omitting it preserves home-org behavior.
Commands, leases and approval asks belong to the acting organization. The
computer owner approves requests, with requester identity and approval binding
verified by the server. Audits are recorded in both acting and home organizations.
Migration 13600 adds availability and standing organization/project grant principals. Existing non-revoked computers are backfilled with their home organization and their owner's memberships. Existing individual grants remain.