DefinedTerm · integration
Service-to-service trust boundary
The credential and permission set one internal service uses to act on another system on an identity’s behalf — deliberately distinct from the credential a user session carries and the one an administrator or scheduled job carries. Three boundaries, not one, because collapsing them is how privilege escalation happens.
Common causes
A service given a user’s session token, or an admin key, for convenience during delivery — and never separated out afterward.
What good looks like
A named, narrowly scoped service credential, issued per integration, revocable independently of user and admin credentials.
Nearby terms
Term set: the build vocabulary. Capital-markets terms are defined on gda.group; agent-economy terms on flashygroup.com. One term, one home.