# Partner Federation
**What this covers**
- Allow-listed partners (Agencies, APIs)
- Scope masks, TTL (default 30 days), and audit logging
- Revocation and no sub-delegation rules
**Quick rules**
- Partners are **receive-only**; they cannot re-share.
- Shares have a **TTL** and are fully audited.
- Traveller can **revoke** any active share at any time.