# The Service manual

<!-- module: s3-service · deck: The platform's owner: looking into a workspace through a lens, with a reason, for a while; and what the workspace sees when it does. -->

**Table of contents · 24 October 2026 · S3 of plan CORE. E-mail and in-app notices of a lens come with S7 and S14; two-factor for the Service (required in production) and the step-up before a lens came with S8.**

The Service is the platform's owner: one account, set up on the server. It sees nothing of any workspace until it opens
a lens on one, for a reason and a set time, seeing it as one of its members. The workspace sees that it did.

The one sentence to carry through it: **the platform sees no workspace's records without a lens, and every lens is
seen by the workspace.**

**Who meets what**

| Seat | Who | What they do here |
|---|---|---|
| Service | The platform's owner | Makes workspaces, opens and ends lenses, reads the lens log, pauses and reactivates workspaces |
| Owner | Someone in a workspace with `lens.notice` (the Owner role) | Sees when support looks in, and the recent lenses |
| Operator | Whoever runs the server | Makes and names the Service, checks it, resets its password, moves it to another account |

---

## Part 1 · The Service

- [1.1 Opening a lens](p01-service.md#11-opening-a-lens)
- [1.2 Working inside a lens, and ending it](p01-service.md#12-working-inside-a-lens-and-ending-it)
- [1.3 Reading the lens log](p01-service.md#13-reading-the-lens-log)
- [1.4 Pausing and reactivating a workspace](p01-service.md#14-pausing-and-reactivating-a-workspace)
- [1.5 When support looks into your workspace (Owner)](p01-service.md#15-when-support-looks-into-your-workspace-owner)
- [1.6 Naming, checking and moving the Service (operator)](p01-service.md#16-naming-checking-and-moving-the-service-operator)
- [1.7 Making a workspace](p01-service.md#17-making-a-workspace)
- [1.8 Letting people sign up by themselves](p01-service.md#18-letting-people-sign-up-by-themselves)