Read-only links
Use the canonical reading URL for a living publication and an immutable version permalink for a fixed citation or approval record.
Authority-bearing links
- Feedback capability: lets the holder submit governed feedback.
- Review capability: lets the holder approve, request changes, or reject a candidate.
- Edit or management capability: grants a control action and must not be treated as a public reading URL.
Avoid accidental disclosure
- Do not paste capability URLs into public issues, screenshots, analytics, or indexed pages.
- Send the narrowest capability to the intended person.
- Revoke a share link when it was sent to the wrong place.
- Use a version permalink when the recipient only needs evidence.
Search indexing remains separate
Capability pages, candidates, Private publications, and Unlisted publications remain noindex. A Public canonical publication still needs the separate indexing choice and quality gates.
FAQ
Frequently asked questions
Is a long capability URL safe just because it is hard to guess?
It should still be handled as a secret. Anyone who obtains the URL may receive the authority encoded by that capability.
Which link should I put in release notes?
Use a canonical reading URL for a living document or an immutable version permalink when the release note must identify an exact revision.
Use the real workflow
Publish what your agent creates.
Give every report, document, or plan its own reader-ready page. Comments, review decisions, and formal revisions can flow back from there.