Connected sites

A connected site stores an asset id and renders signed URLs — it never keeps a copy of the file. That is what makes rights real downstream: when a licence expires here, the image stops rendering there. Each site is scoped to asset groups, so it can only ever show what you have given it.