Architecture & setup diagrams
TC-OPENBAO-UC-003 / TC-OPENBAO-AUTH-001: SA → role → policy → mount. Isolation = role binding + policy paths + explicit deny (KV v2 needs …/data/*).
TC-OPENBAO-UC-003 / TC-OPENBAO-AUTH-001: SA → role → policy → mount. Isolation = role binding + policy paths + explicit deny (KV v2 needs …/data/*).