Lesson 5: Networks, secrets and keeping tenants apart
22 min read·
Module 10 · Lesson 5 · About 50 minutes · Needs: Module 2 lesson 3 (residency rules), Module 9 lesson 5 (the sandbox's egress policy). No key and no model calls
The situation
Week 10 at Northdesk. Before the service goes live, Leila asks: what can each part of the platform reach, and what can reach it? Where do provider keys live in each environment? How is Halcyon kept apart? How do we prove Brennan & Kloss's data never leaves the EU?
The running example is one request. t-brennan-u007 at Brennan & Kloss Logistics (Germany, EU residency, shared tier) asks Ask how many days of annual leave they have in 2026.