Remote Sharing Feature Overview
Feature Preview
This feature is in preview and subject to change. We welcome feedback!
Remote sharing enables secure model synchronization between Istari installations. This document describes current capabilities and limitations.
Sync Behavior
- All sharing is one-way from upstream to downstream (bidirectional sharing requires two separate relationships).
- All synced content is immutable on the downstream.
- All configuration is done via environment variables.
- Hard Deletion is not supported. Unsharing on the upstream stops future updates but does not remove downstream copies.
Content Support
| Content Type | Sync Support | Notes |
|---|---|---|
| Models | Full | All model data syncs to downstream. |
| Artifacts | Partial | Synced artifacts are treated as orphaned (no association to parent model). Not visible in UI, but accessible via API. |
| Comments | None | Comments do not sync. Downstream users can add comments visible only to downstream users. |
| Control Tags | Full | Synced and immutable on downstream. Downstream admins control user-to-tag assignments. Remote owners automatically inherit upstream control tags. |
| Infosec Levels | Demostration | Synced and immutable on downstream. Downstream admins control user-to-level assignments. Remote owners do not automatically inherit upstream infosec levels. Sync is blocked if the downstream (high side) has a lower classification level than the upstream (low side). The architecture around infosec syncing is not final. |
| Jobs | None | Jobs cannot be run on models shared from upstream. Job execution is only available on locally-sourced models. |