Scoped Permission Error in One Code Branch (Capability Evidence First)
Treat a permission failure on one path as a capability-discovery problem: record the operation that path intends to perform, compare it with the credential's declared grants, and stop before making the outbound call. Rotating the key first can hide the mismatch while quietly widening its blast radius. TL;DR: In a customer-support service, give each workload a narrow credential and a spending…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.
