Least-privilege access
Access follows the principle of least privilege: role-based access control (RBAC), narrowly scoped API keys, and per-action permissions. The most sensitive operations are restricted to trusted operators and excluded from broad grants.
What this looks like in practice
- Every identity — human or machine — gets the minimum access it needs, nothing more.
- Role-based access control (RBAC) governs what each person can see and do.
- API keys are narrowly scoped, with per-action permissions.
- The most sensitive operations are restricted to trusted operators and excluded from broad grants.
Why it matters
Least privilege caps the blast radius. If a credential is ever misused, what it can touch is small by construction — not by luck.
- RBAC
- Scoped API keys
- Per-action permissions
- Operator-only sensitive ops
Have a security question?
We're happy to walk through our practices in more detail, share documentation, or hear about a concern. A human reads every note.
This page describes our security posture at a high level for transparency; it is not a contractual commitment.