Trust needs a place you can open.

The customer trust centre gathers pending approvals, active and stalled work, recent receipts, memories with provenance, connected Google or Microsoft accounts and standing login permissions in one signed view. Settings now also offers a reviewed Sources directory. Notion, GitHub and Slack are its first private-pilot sources, each held to the read tools named in its reviewed entry.

It does not build a second trust database. Each section reads or links to the same record SAINT already uses to work, remember and prove an action.

Capture can be paused immediately. Restarting requires a deliberate confirmation. Disconnecting a source first hands its grant back to the provider, then removes the records SAINT retrieved through it. A remembered claim supported only by those records is removed; a claim with another live source remains.

Export, one-use downloads, remembered-content erasure, account deletion, webhook changes and lifting lockdown now cross the same passkey boundary. The approval is bound to the exact proposal, and deletion is not reported complete while a provider exception or an offline device still owes an acknowledgement.

Added 5 September 2026. The trust centre now carries one section titled “Without asking”. It lists every standing permission SAINT holds on the person's behalf, grouped by rung: mail classes she handles, contact automation, login permissions, purchase mandates, delegates and guests. Each line says what the permission allows, when it expires and where it is revoked. A rung with nothing granted says so.

The section reads from the records SAINT already uses to act. It creates no new permission and widens none. Anything not listed there still waits for the person's yes. Permissions that have no expiry are counted, so the person can see which ones stay until revoked. From the same week a mail class SAINT handles lapses ninety days after it was granted and shows its date here; renewing it is the same sentence as granting it. The public line learned the same lesson: a stranger's question is put in front of the person in one text, the next reply is passed on through the office, and a kind of question the person has answered often enough can be granted to SAINT, who then answers it only from what the person has already decided.

The trust centre and the reviewed Notion, GitHub and Slack connections are available in the private pilot. Each is read-only inside SAINT's local tool allowlist, source records expire after ninety days, and a connection requires encrypted credential storage. A source SAINT cannot yet complete says so rather than offering a button. Passkey enrollment and recovery remain in development until live device, browser and rights-flow verification is complete.

Voice recognition is not an authority. The biometric or device PIN used by a passkey remains on the person's device; SAINT stores the public credential and a bounded receipt, not a voiceprint. The page does not widen what SAINT may collect, retain or do.