What goes in one end, and who can draw facts out the other. The console never touches the facts themselves — it only sets the rules of the pipe.
Point cameras, device offloads, or stored footage at your pipe. It turns what it saw into facts — kept, and ready to answer.
Hand a guest a scoped link. They draw only the facts you allow, through a fixed menu of tools — never the raw footage.
Pull a link instantly. The pipe re-checks every request, so access ends the moment you say so.
Raw stays home. Only job-specific facts ever leave the pipe — safe to share, and you can prove it.