Chapter 22
Protected Source
BUSINESSFoundation
Least-privilege source exposure — not DRM.
What it is
Protected Source reduces source/IP exposure by withholding plaintext from unauthorized users and providers.
This is exposure reduction — not unbreakable DRM, not revocable plaintext, not impossible to copy.
How it works
Forge Secrets — credentials / tokens / vault data.
Protected Source — files unauthorized clients should not receive.
Outcomes: allowed, denied, metadata_only, stub_only, capability_only.
Selective sync omits files; omission ≠ deletion.
Important notes / limitations
Feature registry currently marks this as in development (foundation).
Library + filters landed on draft PR #5; end-to-end sync/UI QA is weekend work.
Fail closed if authorization is unavailable.