Recommendations
Saved resource access
AnonymousPublic source tools need no credential. Saved watches/searches require watches:read/write and searches:read/write; profiles require profiles:read/write; workflows require workflows:read/write; comparison briefs require briefs:read/write; alerts require alerts:read/write. Ingestion control requires ingestion:read/write. Credentials stay in memory for this tab and clear on reload.
Source recommendations use saved profile preferences and Rust ranking. Explicit fit checks compare your unverified declarations against the current source; unknown facts remain unknown.