The configure assistant's reads — K1 POST /api/security/configure/catalog (every setting, compact, with what the layers above leave the subject, archetypes with keyTraits, canSave) and K2 POST /api/security/configure/current (resolved, stamps, own items with origin, inherited texts), ConfigureSubject, ConfigureAccess and ConfigureRefusal; the org's name never reaches the model (KamoCollab CP10 Task 5)

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.