Cal.com auth token expired — bookings failing
New booking attempts have returned 401 since 14:02 UTC. Prospects cannot complete booking. Reconnect from Integrations.
What PAS can see, what PAS can do, and what always needs a human. These are trust controls — not admin clutter.
Rehearsal mode — these controls are display-only.
The brokerage PAS is operating for. Profile editing connects when the backend is wired.
Who you are in PAS, and where you are working right now. Your identity is yours and travels with you; the workspace governs its own business records. Real sign-in arrives with authentication.
You · person-owned & portable
This is yours. Your identity, profile, and personal PAS setup follow you across every workspace and stay with you if you leave one.
Your PAS · personal preferences
Editing connects when the backend is wired — display-only for now.
Current workspace · governed records
Client and transaction records here belong to the workspace, not to you. Switching between workspaces arrives in a later checkpoint.
Access & security
Demo session — real sign-in not connected yet
Coming later
Google sign-in / magic link will be wired in a later checkpoint.
Sign out connects when real authentication is enabled.
Everyone in the workspace and the role bundle they carry. Inviting and editing members connects when the backend is wired.
Member management is demo-only. No invitations are sent.
What each role can see and do. Simple bundles, not a permission grid — PAS never lets the UI offer more than the role allows.
Full visibility and approval authority across the brokerage.
Can
Operational control without ownership-level billing access.
Can
Visibility and coordination scoped to their team.
Can
Cannot
Their own leads, calls, callbacks and bookings.
Can
Cannot
Read-only visibility, no actions.
Can
Cannot
ORVN Labs cross-tenant support and incident access.
Can
Cannot
Display-only — real enforcement is server-side. Demo / rehearsal.
What always needs a human. These are the guardrails that keep PAS a partner, not an autopilot.
PAS can draft a message, but a human approves before anything is sent.
Every bounded action waits for sign-off. Nothing runs automatically.
12 connectors can prepare a write — each one is approval-gated.
Only Critical breaks through. Everything else respects quiet hours.
This workspace is in rehearsal. PAS has not changed live customer behavior.
How loud each signal is allowed to be. Quiet hours hold everything except Critical.
Quiet hours: 8:00 PM – 7:00 AM (demo default). Editing connects later.
How PAS speaks and when it asks for a human. Tuning connects when the backend is wired.
Controls are locked in demo mode — values are display-only, nothing is saved.
This is demo/rehearsal data. PAS has not changed live customer behavior.