AUTHENTICATION
Security boundaries
Credentials identify one purpose and never expand ownership.
Least privilege
- User and application reads are owner-scoped.
- Device credentials authenticate one device.
- Admin support access does not permit customer device control.
- Unknown or cross-owner resources remain undisclosed.
- Secrets are redacted before Assistant persistence.