# Provider Vault options

Auto-lock idle timeout
OS notifications on job gate / complete
Auto-lock when browser sleeps / SW suspends

## Deploy folder sync (hosted path)

OPSEC notice: granting a remote page folder access is normally a sensitive decision. Here it is constrained by architecture: write-only to the single folder you pick (no read of other paths), revocable anytime, blast radius bounded to that folder. Prefer a dedicated/empty deploy directory.

What syncs depends on the server’s sync mode: full (default) writes the portable project — code, frozen tests, the `.supergit` ledger, and git history — so any RHA session can re-attach to the folder and keep working on it. deployable writes code + tests only (a production copy, not re-attachable).