Identity & attribution

Sharing needs to know who wrote each note, but it must not ask a collaborator to create an account. Identity rides on the SSH key they already have.

Identity from the key

The gateway accepts any SSH key and captures its fingerprint as the collaborator’s identity. The fingerprint is stable - the same key means the same person across sessions - and it costs nothing to obtain, because anyone connecting over SSH already presents a key. There is no signup, no password, and no email.

An optional display name

A fingerprint is stable but not readable. So on their first submit, a collaborator is prompted for an optional display name:

Display name (optional): Priya

cueloop caches the name against their fingerprint, so later sessions skip the prompt. A collaborator who skips the prompt stays anonymous, and their notes are attributed to no one in particular.

Attribution renders name-in-border

Each collaborator’s annotation is a bordered box whose border title is the author’s name, coloured per author so two people are easy to tell apart. An anonymous author’s border is gray. This reuses cueloop’s existing agent-note box style, so shared notes look native next to everything else in the review.

Your own annotations keep their usual title - the annotation kind plus the quoted text they anchor to - so at a glance you can tell your notes from a collaborator’s.

Two submit directions stay separate

There are two distinct submits in cueloop, and they go to different places:

• A collaborator’s submit writes annotations back to the shared store only. It never sends feedback to your agent.
• Your submit is the verdict that reaches the agent. You decide what, if anything, from the shared review goes into it.

Keeping these apart means a teammate can annotate freely without any risk of their notes reaching the agent on their own. The gate to the agent is always yours.