Secure Patterns

A customer only needs to prove they own a domain once, but there is no ongoing check to confirm they still own it later

A request three services deep should still name the user who started it

A login method is a credential binding, not an email match

Your search index is a second copy of your data, so it needs the same access rules as the database it came from

Bind approval to the exact tool call, not the agent's description of it