Share a report.
Not the whole project.

Report shares are snapshot-pinned tokens — env, status, cut, and date window locked at share-time so a read-only link can't escalate to the open API. Per-recipient magic link + emailed 6-digit code + code-verified viewer session for private reports. Grants are scoped at the report level, revocable per recipient.