Evidence and verification
Access governance
Roles and granted scope govern access. Independent review stays separate from contribution.
Review the configured roles, project grants and approval responsibilities.
Tenant boundaries
Hosted persistence uses tenant-scoped PostgreSQL and forced row-level security checks.
Verify the deployed database roles, network boundaries and isolation tests in the target environment.
Evidence custody
Hosted file access checks tenant scope, recorded versions and the trusted scanning verdict. Unresolved scans remain quarantined.
Verify private Blob storage, managed identity, key configuration and clean/malicious-file handling in Azure.
Hosted operations
Local Azure build checks are recorded. The isolated hosted security, delivery, load, recovery and rollback rehearsal is still pending.
Review deployment evidence and agreed recovery objectives before opening customer traffic.