Good question! You know quite a bit about wordpress. The easy answers first:
1. Yes, one contributor per site. The initial purpose of symbiostock was to get everyone independent that way.
2. Yes, one symbiocard per site. The symbiocards are generated as having a unique key according your domain, and that way they are always fetched from the root of your site predictably.
But regarding permissions - everything "significant" to symbiostock is generally done as an admin. If you find any abuse-able stuff on the lower end let me know
Images cannot be properly generated through WP's "add new image" feature (comes with registering a post type) but I have not yet figured out how to completely remove it. Technically the only
legit way to add an image is through the image processor. But again if you find any loopholes or areas of possible abuse let me know.
But multiple image authors per site...with a few adjustments it should be possible. Right now everything is set up for complete independence. Once you start managing multiple authors a whole new feature set is demanded. So I started simple