Skip to content

Security

// Securitycontrol plane

Treat the session endpoint as a control plane: keep it private, restrict reachability, and rotate tokens when needed. Use external network and identity controls around FlowLayer when operating beyond a single trusted machine.