Tenancy & isolation

Every team's Wok is its own private setup. Your data is isolated from every other tenant from the moment the Wok is provisioned — at the database layer, at the docker-network layer, and at TellWang's authorization layer.

Your own database

Each Wok gets its own Postgres instance in its own container, with its own credentials — not a shared table with a "company id" column you have to trust. A bug in someone else's app simply can't reach your data, because it's a different database.

Each Wok also runs on its own private network, so no other team's services can reach yours — even when they share a host. Inbound requests are routed to your Wok by hostname, and no other tenant ever sees it.

Authorization boundary

Every request that touches a Wok is authorized server-side against the team that owns it. If it comes from another team, the response is a 404 with no leak (not a 403 — the Wok's very existence isn't revealed). A leaked key from one company can never operate on another company's Wok, even with a correctly-guessed Wok ID.

The control plane enforces this on every request. A cross-tenant probe can be run against the live fleet on demand; it is not wired into the release path yet.

Isolation tiers

Your Wok runs its own database and services in their own containers on shared bare-metal, with isolation enforced at the database, network, and authorization layers. Teams whose compliance needs a harder boundary than a shared kernel can arrange a sandboxed runtime or confidential-compute hardware with us — see isolation.

Built to survive failures

Your Wok's database, storage files, and deployed code are backed up every six hours to separate-AZ storage. Continuous WAL archiving reduces database RPO to minutes. Recovery is exercised against scratch space rather than live data, so a restore is never rehearsed on top of something you depend on.

Region: single-region (ca-central-1) today. The backup node survives a host or availability-zone failure. A full regional outage is outside the recovery guarantee.