Who gets into your project, and what stays right when people come and go

A shared list is only as good as what it says about who did what. People join, people leave, someone renames a list while you're reading it, and an app asks to be let in. Each of those can quietly make the list wrong. Here is what Hamloy does in each case.

Taking someone off, and the history saying why

A couple shared their house chores in one project. The partner joined from the invite email, ticked "Take out the recycling" and put "Do the dishes" down as theirs.

Later the partner was taken off the project. Before it happened, the dialog said what would follow: what was for them becomes for anyone, and what they finished stays theirs. Afterwards "Do the dishes" was for anyone, and the recycling still said who did it. The history didn't look like a change somebody made by hand. It said the for was cleared because the partner was off the project.

Who did what is kept by the person, not by the name they had, so someone who leaves keeps the work they did, under the name they had.

Asked before they've joined

The owner of a bakery site invited Sara, then asked on the board "Which cake goes on the front page?". Sara hadn't accepted yet. The question said it waited on Sara (invited) and left the owner's own For you. When Sara joined, it moved to Sara's For you. Sara answered with a reason, and the owner saw the answer, the reason and who gave it.

Invited, and told what it costs them

Ben joined Ana's design studio project from the invite email, ticked off a task and added one. Ben's account page said that Ana's plan covers Ben on that project, so there's no need for Pro there.

An app can't pass itself off as Claude

Agents get into a project through a page that asks you to let them in. That page decides whom you trust with every project you have, so a familiar name isn't enough. In a test, an app registered with Hamloy under the name "Claude", but with its own address to send people back to. The page said:

Let "Claude" in?
This isn't Claude. Claude sends you back to claude.ai; this app sends you to
evil.example. Hamloy won't let it in under that name.
[Don't allow]

There is no Allow button, and the server refuses it even if one is posted.

Why

The point of a shared list is that you can trust it without checking: who is on what, who finished what, who asked whom. That only holds if it stays right when people join and leave, and if only who you meant gets in.

See Teams and sharing and History and undo.