# Product principles

Qentrah is built around a few non-negotiable rules:

1. **One authoritative record per business concept.** Deals do not compete with a second opportunity model, and AI tools call the same lifecycle operations as human-facing adapters.
2. **Authorization is server-owned.** Client capability state may improve the interface, but it never grants access.
3. **Reactive data stays reactive.** Convex owns server records; IndexedDB is reserved for drafts and client-only configuration.
4. **Bookmarkable work has real routes.** Table, list, board, calendar, timeline, dashboard, and advanced-search views remain linkable and policy-filtered.
5. **Agents inherit human boundaries.** MCP and Eve execution remains scoped to the authenticated Organization, Space, Project, and resource permissions.

The domain vocabulary and deepened module boundaries are documented in [CONTEXT.md](https://github.com/Up-to-code/ai-p1/blob/main/CONTEXT.md).