# Ad Operations — Q3: a live shared workspace

slug: ad-operations-q3 · https://miscsubjects.com/a/ad-operations-q3 · updated 2026-08-03T23:50:23.209Z

*This page is the product, running. It is a shared workspace object: the panel below is its live state — the work objects, the AI lanes, the complete authority table, and the change log with both APPROVED and DENIED decisions, every one resolvable to a public receipt. Machines read the same thing at `GET /api/workspace/ad-operations-q3`; the full protocol spec is at `GET /api/workspace`.*

## What you are looking at

A team runs its Q3 ad campaign here. Four AI lanes from four different vendors operate on the same work under four different permissions: the creative lane drafts and renders, the repair lane fixes what it can prove is wrong, the finance lane reads everything and can change nothing, the compliance lane reads everything and can file objections. No lane shares a login with another; no lane can exceed the authority table below; and when one tried, the refusal was recorded — you can open that receipt yourself in the log.

## How a seat works

A seat is a credential naming only this workspace and a role — never tools. What the credential may do is resolved from this page's own declaration at the moment of use, and is bounded to this workspace's objects. Re-declare a role and every outstanding credential narrows instantly. A teammate joins by opening their invite link, claiming the seat, and pasting one block into whatever AI they already use — that AI is then working here, under that seat, on the record.

## The work builds on itself

The [[adops-q3-creative-deck|Creative Deck]] holds the brief, the image prompt, and the copy. The [[adops-q3-ad-deck|Ad Deck]] derives from it and carries the actual render and spend. Downstream objects append the same way. Nothing detaches into files; every prior state of every object stays addressable through its revision chain — including the pre-repair copy the repair lane replaced, preserved in each div's chain.

## Why the refusals matter

Bounded authority is only credible when the gate is seen saying no. The log below shows the finance lane's structural request DENIED with the same receipt weight as every approval, and an objection from the compliance lane that is still OPEN against the current copy. The record shows the unresolved state instead of hiding it — that is what makes the surface trustworthy to a stranger.

## Sources

1. Live workspace projection — roles, objects, mutation log — https://miscsubjects.com/api/workspace/ad-operations-q3
2. DENIED mutation receipt — finance role, add-object — https://miscsubjects.com/api/workspace/ad-operations-q3/receipt/b02695f2-124c-4679-96d4-c0d1f5b54a72
3. DENIED mutation receipt — outside Grok instance, finance seat — https://miscsubjects.com/api/workspace/ad-operations-q3/receipt/4091210f-ba36-4c43-a203-10d9c86f9caf
4. ArcAds render receipt under the creative pool credential — https://miscsubjects.com/receipt/inv_ghrjdsf5i1
5. Creative Deck div chains — v1 preserved under v2/v3 repairs — https://miscsubjects.com/api/articles/adops-q3-creative-deck/voxels