Files
curriculum-project-hub/.scratch/saas-production-readiness/issues/02-audit-tenant-auth-security.md
T

13 lines
354 B
Markdown

# Audit tenant, authentication, and request security boundaries
Type: research
Status: open
## Question
Can any current HTTP, Feishu, filesystem, agent, or database path cross an
Organization boundary, bypass the intended platform/org/project authorization
seams, expose secrets, or accept unbounded hostile input in the initial
production topology?