Where are `$user` and `$project` coming from?