R7 — Shared War Room
Five Northstar responders, one incident, one clock. Each seat may summarize and translate locally, in its own language and reading level — but one server-controlled event state owns the facts, the decisions and the consequences. Prove the boundary holds when a seat is modified.
Five seats join with identical canonical facts
Same case, same topology, same clock.
Presents the OAuth grant as 'confirmed data theft'
A paraphrase, not a finding — but it reads like one on that seat.
seat=3 · claim=confirmed-theft
Attempts to write a containment result directly
A patched browser tries to declare the incident closed.
actor=seat-5 · op=state-write
Branch chosen from authoritative team decision
Every shared change has an actor, an authorization and a transition.