Initial import of zapier-decisions from zapier monorepo
This commit is contained in:
commit
7a094c241b
10 changed files with 100 additions and 0 deletions
6
decisions/D004-leaf-accounts.md
Normal file
6
decisions/D004-leaf-accounts.md
Normal file
|
|
@ -0,0 +1,6 @@
|
|||
# D004 — Leaf cannot touch billing, even if authz is skipped
|
||||
|
||||
**Status:** accepted
|
||||
**Step:** 4
|
||||
|
||||
`verae-nats-accounts/policy.json` is the allow-list. access-leaf refuses any target not in the leaf set. nats.conf documents INTERNAL vs LEAF accounts for when the lab cluster is replaced with a real accounts-enabled nats-server.
|
||||
Loading…
Add table
Add a link
Reference in a new issue