Unclassified

Resource Isolation Leak Manifest

Date: 2026-08-01
Source: scripts/audit-resource-isolation.ts
Blocking rule: No env.test target may equal any env.prod target for any binding class.

Summary

SeverityCount
Critical50
Errors0
Warnings0

Remediation order

  1. Gateway + directly bound services: DB, RATE_LIMITS, SESSIONS, OAUTH_STATE_KV, FILES
  2. Spine/canonical stores: separate Neon/D1 per environment
  3. Remaining services with shared D1/KV/R2 IDs

Live leak list

<expected-output> Run `npx tsx scripts/audit-resource-isolation.ts` for current output. </expected-output>