Security Best Practices for W7S Cloud Tenant Subdomains
ยท 5 min read
Every *.w7s.cloud subdomain is an organization tenant.
That detail matters. It means acme.w7s.cloud and example.w7s.cloud may both
run on W7S, but they belong to different GitHub organizations and must be
treated as mutually untrusted.
The parent domain is shared. The trust boundary is the exact tenant origin.