{"slug":"architecture/RESOURCE_ISOLATION_LEAK_MANIFEST","title":"Resource Isolation Leak Manifest","section":"architecture","sectionLabel":"Architecture","status":"unclassified","type":"document","path":"architecture/RESOURCE_ISOLATION_LEAK_MANIFEST.mdx","bytes":674,"description":null,"updated":null,"source":"integratewise/Integratewise-docs-wiki","content":"\n**Date:** 2026-08-01\n**Source:** `scripts/audit-resource-isolation.ts`\n**Blocking rule:** No `env.test` target may equal any `env.prod` target for any binding class.\n\n## Summary\n\n| Severity | Count |\n| -------- | ----- |\n| Critical | 50    |\n| Errors   | 0     |\n| Warnings | 0     |\n\n## Remediation order\n\n1. Gateway + directly bound services: `DB`, `RATE_LIMITS`, `SESSIONS`, `OAUTH_STATE_KV`, `FILES`\n2. Spine/canonical stores: separate Neon/D1 per environment\n3. Remaining services with shared D1/KV/R2 IDs\n\n## Live leak list\n\n<expected-output>\nRun `npx tsx scripts/audit-resource-isolation.ts` for current output.\n</expected-output>\n"}