# Audit tenant, authentication, and request security boundaries

Type: research
Status: open

## Question

Can any current HTTP, Feishu, filesystem, agent, or database path cross an
Organization boundary, bypass the intended platform/org/project authorization
seams, expose secrets, or accept unbounded hostile input in the initial
production topology?