curriculum-project-hub/.scratch/saas-production-readiness/issues/02-audit-tenant-auth-security.md

Audit tenant, authentication, and request security boundaries

Type: research Status: open

Question

Can any current HTTP, Feishu, filesystem, agent, or database path cross an Organization boundary, bypass the intended platform/org/project authorization seams, expose secrets, or accept unbounded hostile input in the initial production topology?