Module 2 · State, access and delivery · Lesson 6
Secrets, identity and tenant isolation
A platform serving several customer organisations must keep each one's cases, documents, credentials, model traffic and spend apart at every layer. Tenancy models, short-lived credentials with OIDC, row-level security in Postgres, credential brokering and per-tenant keys.
Setup for the exercises:Install Claude CodePython with uvDocker and Docker ComposePostgres with pgvector
By the end of this lesson you can
- Choose a tenancy model (pool, silo or bridge) for each layer of an agent platform
- Trace the identity chain from user to organisation to case to agent action, and enforce it at every store
- Replace static secrets with short-lived federated credentials, and compute the reduction in exposure window
- Implement Postgres row-level security keyed by tenant and test that it fails closed
- Isolate model traffic per tenant with gateway keys, budgets and cache boundaries