Scenarios can be shared three ways. The Share icon (top right of any scenario page) opens a modal where you choose the mode.
Internal only (default)
Only signed-in members of your organization can view. The link is the canonical URL — palanor.com/yourorg/scenarios/the-slug. Row-level security gates access; people outside the org cannot read the scenario even if they have the URL.
Anyone with the link
Public via an unguessable share token. The link looks like palanor.com/share/<token> and renders a clean, unauth-friendly view of the scenario — the headline, the headlines from the unfolding, the body, the timeline inset, and the Numen-for-{org} card. No nav rail, no edit affordance, no Numen-for-user. Purely the scenario as a published artifact.
The brand walks out the door the moment a steward sends a public link.
Specific people by email
Invite specific people by email address. Add comma- or newline-separated addresses, save, and Palanor sends a private per-invitee link to each one. The link works without sign-in. Each invitee gets a unique token so the URL is theirs alone — admins can see when each invitee first opened the link and when they last viewed it, and can resend the email per-invitee.
Who can change sharing
Only owners, admins, and researchers can change a scenario's sharing settings. Members and viewers see the current link in the Share modal but cannot toggle modes or add invitees.