## Decision

Public share links should give an **unauthenticated read-only view**. Anyone with the link can open the project without signing in.

This implements the “Sharing without account?” item in #45, which is too broad to carry the implementation details.

## Acceptance

- [ ] A project owner can create a public read-only link.
- [ ] Opening the link needs no account and cannot modify the project.
- [x] Decision: the link shows a **live** project, not a snapshot, but strictly read-only.
- [x] Decision: visitors get a **read-only editor** with panels, versions and files.
- [ ] The link token is unguessable and revocable; revoking it stops access immediately.
- [x] Decision: a visitor may **run and upload** the program to a board they connect, but may not edit the project.
- [x] Live document, read-only.
- [x] Decision: public share links **never expire**; access ends only when revoked.
- [ ] Add rate limiting and abuse protection.
- [x] Decision: public links are **noindex** by default and provide a **report** action.
- [ ] Add moderation before any public link can be indexed later, if indexing is ever allowed.
- [ ] Add safety copy for student/minor projects and a way to report a public project.
- [ ] Tests cover anonymous view, revoked link, write rejection and asset access.


<sub>Generated on _MrBeast_ using _opencode/deepseek-v4.1-flash_ in _ses_e8326e581ffeJviTmSkomwnKES_</sub>