Specific architecture, scoped access and controlled operations. Security capabilities are described at their verified source-level state; real-host pilot gates still apply.
Store API keys, database credentials and runtime configuration at project/environment level. Sensitive values stay separate from source and are injected into authorized workloads.
Values hidden after save. No real credentials appear in this example.
OjasBase uses encrypted storage, scoped access and controlled runtime injection. Source tests do not establish that a real deployment is immune to leaks.
| Control | State | Boundary |
|---|---|---|
| Encrypted project secrets | Implemented source · Pilot | Envelope encryption; operator key management and recovery remain host responsibilities. |
| Environment scoping | Implemented source · Pilot | Production, Staging and Preview use explicit environment identity. |
| Build / runtime scope | Implemented source · Pilot | Scoped delivery with immutable release bindings. |
| Bulk .env import | Implemented source · Pilot | Feature-gated parsing/import; keep raw files outside source. |
| Hidden values + versions | Implemented source · Pilot | Metadata omits plaintext; encrypted secret version history. |
| Resource bindings | Implemented source · Pilot | Explicit environment-to-resource variable mapping; no silent Production inheritance. |
| Private database access | Implemented source · Pilot | Authenticated control plane and private managed-resource executor. |
| Read-only SQL default | Implemented source · Pilot | Enforced database/session restrictions, not frontend regex alone. |
| Restricted write mode | Implemented source · Pilot | Authorized elevated operations with Production safeguards. |
| Bounded queries | Implemented source · Pilot | Timeout, row/payload limits and query cancellation. |
| Tenant checks + audit | Implemented source · Pilot | Tenant-owned targeting and metadata audit; result rows excluded. |
| Log redaction | Implemented source · Pilot | Secret filtering is implemented; validate application/build leakage on the host. |
| TLS in transit | Controlled pilot · Host validation | Public HTTPS via Caddy; universal private-traffic encryption is not claimed. |
Feature-gated .env import parses entries into encrypted project configuration. The raw .env file should never become a stored source artifact.
Keep test credentials separate from production. Environment-aware build/runtime scopes and versioned secrets are implemented in source; host validation still applies.
Payment API credentials can be project secrets. Customer card data belongs with the payment provider and should not be stored as an application secret.
Managed Postgres uses project private networking and encrypted generated credentials. Connection reveal requires authorization. Backup and restore remain controlled resource operations.
Database Studio mediates authenticated access through the control plane and private executor. Read-only mode, bounded queries, cancellation and metadata-only audit are implemented in source. Normal console access does not require publishing PostgreSQL to the internet.
SQL can change or delete application data. Production write access requires explicit authorization; query results and sensitive SQL values must stay out of platform logs. Source implementation is distinguished from live-host release validation; controlled Pilot gates still apply.
Organization RBAC, tenant ownership checks, organization API tokens and unique worker credentials.
Caddy administration is isolated. Operator fleet APIs are separate from customer project APIs.
Resource reservations, PID limits, read-only defaults and restricted pilot networking.
Release rollback and managed Postgres backup/restore workflows. Verify restoration on the real host.
Dedicated workers retain Docker-socket authority. Shared pilot networking is not a claim of hostile-public multi-tenant isolation. Live-host isolation, DNS/TLS, backup/restore and restart gates must be proven before widening access.
Start with one application. Add data, domains and capacity as it grows.