Tightened role boundaries so that the ingest role can not drift into admin behavior. This sounds obvious but it is surprisingly easy to let permissions accumulate when you are moving fast. One convenience endpoint here, one shortcut there, and suddenly your ingest key can list every receipt in the system.
Treated receipt access as sensitive by default. Receipts contain decision context, policy snapshots, and action details. In a multi-tenant setup, leaking receipts across tenants is a data breach, full stop. So every receipt query now checks tenant boundaries before anything else.
Built out an explicit role separation model: admin, ingest, and executor. Each role has permissions mapped out rather than implied. Admin can configure policies and view all receipts. Ingest can submit intents for evaluation. Executor can claim decisions and finalize them. No overlap unless explicitly granted.
This week is mostly about preventing accidental privilege creep. The kind that happens when you add a "just for debugging" endpoint and forget to remove it.