Separation of Duties
Separation depends on conflicting powers and protected enforcement. Examine who can authorize a change, alter its checks, or bypass them.
-
-
Zero Trust Architecture
Zero trust is defined as a plan, not a product. The useful test is whether one compromised machine inside your network reaches anything it should not.
-
Policy Enforcement Point
Enforcement must cover protected access paths. A shared gateway can serve several paths when it cannot be bypassed and sees the context its decisions require.
-
Identity and Access Management Lifecycle
A former contractor can still use service and personal credentials after central account disablement. The missing work is revocation and accountable transfer.
-
Standing Privilege
Short-lived tokens can still support continuous access. Distinguish credential age, grant validity, and renewal authority when reviewing standing privilege.
-
Role-Based and Attribute-Based Access Control
Roles and attributes can work together. Review effective permissions, policy inputs, and constraints rather than relying on role names or a simple model label.
-
Row-Level Security
One person duplicates a workbook, forgets the filter, and the report renders perfectly for everyone. That is the failure mode to design against.
-
Data Classification
Labels help determine handling rules, but do not locate every person’s records or enforce policy. Classification needs owners, controls, and current context.
-
Snowflake Architecture
Snowflake separates storage, compute, and coordination into three layers. See what each does, how warehouses buy concurrency, and what controls the credits.
-
Tool Authorization and Argument Validation
A model only proposes a tool call. The runtime decides whether it is well-formed, permitted for this user, valid in the current state, and safe to run without a person.
-
Case: Enterprise Knowledge Search
A fictional company’s search over restricted, changing documents, built and run locally: permission propagation windows, pre-filtering, citations, shadow and canary release, rollback with revocation replay, and erasure.
-
Filtered Vector Search
A vector index returns the nearest neighbors, and a metadata filter such as an access rule decides which of them may be shown. Where the filter runs changes how many results come back and what can leak.
-
Access, Retention, and Erasure Across Data Copies
A deleted row is not an erased person. Follow classification, access rules, retention clocks, derived copies, backups, and audit evidence across a data platform.