What a workspace is
A workspace is the unit that owns everything: members and their seats, connected repositories, the published standard, the audit trail, and the billing relationship. You can own up to three workspaces. Most people need one.Members and roles
The owner cannot be demoted or removed, because a workspace whose only owner had been demoted could not be administered by anyone.
Inviting people
Invite by email address and choose a role. The invitation is created whether or not the email is delivered, and the screen tells you which happened rather than reporting “invitations sent” for both. An invitation holds a seat while it is pending, so five invitations on a three-seat workspace will not all succeed. Invitations expire after 7 days, and you can revoke one at any time to release its seat immediately.Iris Code reports each invitation’s outcome separately. A batch of five on two free seats succeeds twice and fails three times, and you are told which three, because “invitations sent” hides exactly the information you need.
What every member gets
A seat grants Pro in that member’s editor, whatever their own subscription says. See Team entitlement for how that interacts with a personal subscription, and what happens when a seat ends.The shared standard
A workspace publishes one.irisconfig.json standard, built and previewed in Config Studio. It is committed beside your code like any other config, so a new machine enforces it on its first push.
Publishing does not change any repository. It sets what the workspace expects; the config in each repository is what actually runs, and every report names which policy version it used, so drift is visible rather than silently corrected.
The audit trail
Every completed audit records what ran, on which commit and branch, what it scored, how many findings were open and how many were high severity, and which policy version applied. Audits arrive from three places, and all three land in the same trail:- The editor, on every completed workspace scan
- CI, from
iris gate, when the repository sets ateamProjectId - Cloud audits, from connected GitHub repositories