## The union is the title, and every article says where it connects

**The third article leads with the idea instead of the symptom.** It shipped yesterday as *A session
that only reads still holds everything you ever allowed* — the consequence, which is vivid and which
is also only true of mailboxes on a Tuesday. The lead's reading is the better one, and the title is
now [*In this session, the agent holds the union of everything it has ever been allowed to
do*](article-union-of-every-session.html). That sentence travels: it is as true of a coding agent, a
CI token or an MCP server as it is of this connector, and *union* is the word the whole argument
turns on. The old title keeps its job as the first line of the page, where a concrete consequence
belongs. The address does not change.

**The union is now drawn.** Four conversations across seven months, a row per capability, a column
per conversation: reading present from the consent because this shape prompts for nothing to read it,
sending added in March, labelling in June, filters in July — and the fourth column, which asked only
to read, lit all the way down. Under all of it, spanning every column, the band that was agreed in
one click before any of the four: `gmail.readonly · gmail.compose · gmail.modify`, one grant, per
account and application, never per task. It is a staircase, and the shape of it is the argument.

**Every article now ends by saying where it connects.** A card grid — *Where this connects* — with
the other articles, the behaviour policy for the shape the article is about, and the sibling sites
where the model and the record are published: [the four
barriers](https://abp.sgit.ai/model/barriers/) and [the model](https://abp.sgit.ai/model/) at
abp.sgit.ai, [hope is not a control](https://nhi.sgit.ai/hope/index.html) at nhi.sgit.ai, and [the
shapes](https://store.sgit.ai/policies/) at the store. Off-site cards are marked, carry their domain
in the label, and open in a new tab; on-site ones do not. Six per article, hand-written per page
rather than generated, because what connects to what is a judgement and not a query.

**Why it matters more than it looks.** Each article stands on a record and on a published model, and
until now a reader had to take that on trust or hunt for it. The last thing they see is now the list
of things they can check it against — which is the same discipline the articles ask of the products
they describe.

**Not changed.** The article's argument, its sources and its four open questions are as they were.
The five queued articles are still marked *not written*.