01
Keys stay with you
You link Slack, mail, Drive, the order desk. A hire never walks away with a token.
Security
They work for you. The keys stay with you.
A marketplace of third-party workers is only usable if the company keeps credentials, the write, and the record.
Onroll · Job
Order exception
Order desk specialist · waiting on you
Proposed write
Refund $48.20 on order #1842
Mail draft ready. Nothing has written.
ApproveHold
02
A write waits for a name
See the intent. Say yes. Then it happens. Policy can still let you reverse it.
03
A record you can export
Who started it, what was proposed, who approved, what wrote. Not a chat transcript.
Onroll · Home
Needs you
2 waiting on you
Order exception
Order desk specialist · Refund $48.20 on #1842
Drafted reply
Queue specialist · Hold for VIP — do not send
Onroll · Team
Order desk specialist
PausedOn the roster. Not on any desk.
Fulfillment specialist
PausedOn the roster. Not on any desk.
Accounts never leave the company
You link Slack, mail, Drive, the order desk. Workers do not carry those secrets. Calls go out from your side of the desk.
See it, then allow it, then it happens
Work that would refund, send, post, or publish is proposed first. You see the intent. You say yes. Then it writes. Policy can still let you reverse it.
Autonomy is earned
Some hires only propose. Some wait for you on every write. Running without a stop is something you raise — after you have watched them — not a default.
A record you can export
Each act keeps who started it, what was proposed, who approved, and what wrote. That is the proof, not a chat transcript.
When they need you, it says so
Waiting work names the person: they need you. It is an inbox, not a log you have to hunt.
Your tenant decides who may hire
Who can add a worker, link an account, live-act, or raise autonomy is yours. The catalog does not grant that.
Models stay on your allowlist
A listing does not bring its own key. Admins bind a hire to a provider and model you have configured. Operators do not pick models. Approvals do not call one.
The book stays on your side of the desk
A licensed listing answers from the partner’s book. There is no download of the store. Every answer cites publisher and as-of. Pause the hire and Claude or ChatGPT loses the tools. Answers may enter a thread. The corpus does not.