Projects and sources of truth

A project is the HeyAira tenant and security boundary. The authenticated credential selects the project; tools do not accept a caller-supplied project ID to decide authorization.

Ownership

• Git owns files, branches, commits, and pull requests.
• HeyAira owns project memory, tasks, receipts, and repository references.
• The harness owns the live thread and model context.

Projects may reference multiple repositories. A repository reference is not a repository copy.

Project mismatch

If a requested task or memory does not exist in the authenticated project, the agent must stop. It must not create a duplicate, switch instances, or ask the operator to paste the whole task into another client as a workaround.