Skip to main content

Security

  • Identity: Microsoft Entra (Alamo tenant) via Teams
  • Secrets: Azure Key Vault + CSI (hub); never in git
  • Network: per-namespace NetworkPolicies
  • TLS: cert-manager / Let's Encrypt on public hosts
  • Models: customer-approved providers (currently xAI direct for hub demo)

Data handling​

  • Treat operational content as Alamo confidential
  • No cross-tenant memory
  • No Brightwire internal runbooks in this corpus