THE DESIGN
Approved threat model architectureBrowser connects to API and database. API connects to object store. Admin connects to API. Admin is marked internal only.browserapidatabaseobject store/adminINTERNAL ONLY
threat-model.v3 · approved at design review

Which assumption turned out to be false in production?

Pick one. Ten seconds.