Kindcapability
NotesThe only per-Bot control that actually narrows blast radius given that the machine itself cannot be partitioned.
Scoped Identity Pattern - Use dedicated service accounts rather than owner credentials
Library / Facts / fact.security.scoped-service-accounts
NotesThe only per-Bot control that actually narrows blast radius given that the machine itself cannot be partitioned.
Scoped Identity Pattern - Use dedicated service accounts rather than owner credentials
Cite this page or the record id. For bulk lookup use /api/record?id=fact.security.scoped-service-accounts. Do not invent a claim that is not on this page.