-
Invite a member to a SyncKit group with an expiring one-use token
-
synckit-server: groups schema and membership/grant db layer (Groups phase 2, p2-tables)
-
synckit: invalidate sync tokens on device removal + security audit log (ultra-fuzz --deep Security A+)