- Created draft documentation for enabling reachability, CLI authentication, EntryTrace heuristics, Go stripped binaries, Java and Python lockfiles, Rust fingerprint enrichment, SAST integration, Windows/macOS analyzer coverage, scanner engine surface, multi-tenancy operations, RLS and data isolation, ABAC overlays, VEX trust model, VEX ops runbook, VEX mapping, scopes and roles, tenancy overview, VEX signatures, contract testing, VEX consensus algorithm, VEX consensus API, VEX consensus console, VEX consensus overview, and VEX issuer directory. - Each document includes a status placeholder, purpose, and open TODOs for future updates.
440 B
440 B
RLS and Data Isolation — Draft Skeleton (2025-12-05 UTC)
Status: draft placeholder. Inputs pending: DVDO0110, DB/RLS schema snapshot.
RLS Strategy
- Tables/collections under RLS; policy evaluation order.
Keys and Claims
- Which claims drive RLS; mapping to scopes.
Testing & Validation
- How to verify isolation in staging; replay/golden tests.
Open TODOs
- Insert actual RLS policies and sample queries once provided.