Access with intention
Describe how workspace owners invite members, assign permissions, and review access. Publish only controls your deployed product actually provides.
Data, clearly handled
Document the information you collect, where it is stored, how long it is retained, and how customers can request deletion.
A clear reporting route
Give researchers a responsible way to contact your team. Add verified security contacts and response expectations before publishing.