forked from bai/curriculum-project-hub
docs: chart SaaS production readiness
This commit is contained in:
@@ -0,0 +1,12 @@
|
||||
# Audit tenant, authentication, and request security boundaries
|
||||
|
||||
Type: research
|
||||
Status: open
|
||||
|
||||
## Question
|
||||
|
||||
Can any current HTTP, Feishu, filesystem, agent, or database path cross an
|
||||
Organization boundary, bypass the intended platform/org/project authorization
|
||||
seams, expose secrets, or accept unbounded hostile input in the initial
|
||||
production topology?
|
||||
|
||||
Reference in New Issue
Block a user