Model Access, Groups, and Contracts

Make a shared model’s ownership, visibility, and shape explicit.

The useful model

A downstream model needs more than a relation name: it needs a stable, permitted interface.