---
title: "Access begins with an approved organization."
description: "How organizational boundaries, user scope, and session safety apply to HARBINGER."
updated: "27 August 2026"
candidate_route: "/docs/harbinger/boundaries/access-security"
---

# Access begins with an approved organization.

How organizational boundaries, user scope, and session safety apply to HARBINGER.

## Only qualified enterprises and institutions receive organizational access

Reading this site does not grant access to HARBINGER, a customer workspace, data, credentials, or a Sandbox. There is no personal signup or instant credential.

Customer access follows an enterprise or institution application, organization and business-purpose qualification, approval of scope, price, and contract, and then an invitation to named users. Each user remains bound to the approved organization, role, purpose, and data scope.

## Protect the session boundary

- Use only the account issued or approved by your organization.
- Do not share credentials, recovery codes, session tokens, or customer URLs.
- Export or capture information only under your organization’s handling rules.
- Report unexpected access instead of attempting a workaround.

> **Never send:** Calamophyton support should never ask for a password or one-time code.

## Read access states literally

- ACCESS_DENIED — the current identity is not permitted to view the resource.
- NO_DATA — no permitted input is available.
- UNMAPPABLE_VERSION — the workspace cannot safely interpret the contract version.
- FAILED — processing stopped without exposing sensitive internal detail.

---

Published route: /docs/harbinger/boundaries/access-security