Security
HoBo is secure-by-default, zero-trust, defense-in-depth. This section is the home for identity, access, tenancy, and network isolation — not scattered under Guide.
In this section
| Page | Topic |
|---|---|
| Identity & auth | Workload SVIDs, brokered tokens, continuous identity, secretless-first |
| Multi-tenant & policy | Deny-by-default, lanes, guardrails, provider-terms hygiene |
| Connectivity & networking | Named endpoints, overlay, secretless connectors, PAM |
| Agent credentials | Scoped short-lived agent credentials — no ambient admin |
| Config & secrets | Secretless resolution ladder (reference) |
| Policy plane | Packs, obligations, policy.Decided (reference) |