
Strict Ingress Validation
Requests are immediately validated against Keycloak OIDC tokens and precise Cedar permission policies.Internal Isolation
Internal services do not expose public endpoints. They completely rely on the edge proxy for authentication checks.