Thiago Silva | Articleshttps://thiago.limaesilvatecnologia.com.br/en/artigos/From infrastructure to AI security. Connecting experience, architecture and innovation.enCloud SQL: database location does not finish the security reviewhttps://thiago.limaesilvatecnologia.com.br/en/artigos/cloud-sql-regional-control-plane/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/cloud-sql-regional-control-plane/Regional administrative API endpoints raise an architecture question: where do the operations that manage your data travel?Sat, 12 Sep 2026 00:00:00 +0000Access control: who decides and who executes?https://thiago.limaesilvatecnologia.com.br/en/artigos/access-control/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/access-control/Clear responsibilities prevent ownerless permissions.Sat, 12 Sep 2026 00:00:00 +0000Attack surface: include the forgotten pathshttps://thiago.limaesilvatecnologia.com.br/en/artigos/attack-surface/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/attack-surface/Reviewing only the main application misses integrations.Sat, 12 Sep 2026 00:00:00 +0000Authentication: design beyond loginhttps://thiago.limaesilvatecnologia.com.br/en/artigos/authentication-journeys/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/authentication-journeys/Device changes and recovery also establish trust.Sat, 12 Sep 2026 00:00:00 +0000Authorization: turn business rules into testable decisionshttps://thiago.limaesilvatecnologia.com.br/en/artigos/authorization-decisions/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/authorization-decisions/A user role alone does not explain resource access.Sat, 12 Sep 2026 00:00:00 +0000CI/CD: every stage carries a trust boundaryhttps://thiago.limaesilvatecnologia.com.br/en/artigos/pipeline-trust/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/pipeline-trust/Building code and authorizing production are different decisions.Sat, 12 Sep 2026 00:00:00 +0000CSP: treat adoption as a dependency migrationhttps://thiago.limaesilvatecnologia.com.br/en/artigos/csp-migration/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/csp-migration/A sustainable policy needs script owners.Sat, 12 Sep 2026 00:00:00 +0000CSRF: review state-changing operationshttps://thiago.limaesilvatecnologia.com.br/en/artigos/csrf-business-flows/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/csrf-business-flows/Risk depends on how the browser sends session authority.Sat, 12 Sep 2026 00:00:00 +0000Additional encryption: which threat does it address?https://thiago.limaesilvatecnologia.com.br/en/artigos/envelope-data-boundary/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/envelope-data-boundary/Application encryption changes exposure boundaries and operations.Sat, 12 Sep 2026 00:00:00 +0000Database roles: separate queries, maintenance and recoveryhttps://thiago.limaesilvatecnologia.com.br/en/artigos/database-roles/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/database-roles/A shared credential hides distinct operational decisions.Sat, 12 Sep 2026 00:00:00 +0000Availability: budget expensive operationshttps://thiago.limaesilvatecnologia.com.br/en/artigos/availability-budgets/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/availability-budgets/Request counts can hide large differences in work.Sat, 12 Sep 2026 00:00:00 +0000SBOM: from component list to response decisionhttps://thiago.limaesilvatecnologia.com.br/en/artigos/sbom-operational/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/sbom-operational/Inventory must connect to running software.Sat, 12 Sep 2026 00:00:00 +0000Containers: follow the review into runtimehttps://thiago.limaesilvatecnologia.com.br/en/artigos/container-runtime/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/container-runtime/An approved image still depends on deployment permissions.Sat, 12 Sep 2026 00:00:00 +0000API errors: a contract for clients and operationshttps://thiago.limaesilvatecnologia.com.br/en/artigos/error-contracts/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/error-contracts/Public responses and internal diagnostics serve different audiences.Sat, 12 Sep 2026 00:00:00 +0000Uploads: receiving a file does not release ithttps://thiago.limaesilvatecnologia.com.br/en/artigos/upload-quarantine/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/upload-quarantine/Model states between ingestion, inspection and use.Sat, 12 Sep 2026 00:00:00 +0000Account recovery: support is part of the controlhttps://thiago.limaesilvatecnologia.com.br/en/artigos/account-recovery/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/account-recovery/An exceptional procedure can redefine trust.Sat, 12 Sep 2026 00:00:00 +0000GitHub Actions: who can change the build tool?https://thiago.limaesilvatecnologia.com.br/en/artigos/actions-third-party/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/actions-third-party/Pipeline dependencies deserve code-level scrutiny.Sat, 12 Sep 2026 00:00:00 +0000Security headers: own the final responsehttps://thiago.limaesilvatecnologia.com.br/en/artigos/headers-ownership/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/headers-ownership/CDN, proxy and application may produce different settings.Sat, 12 Sep 2026 00:00:00 +0000Infrastructure as code: return manual exceptions to the workflowhttps://thiago.limaesilvatecnologia.com.br/en/artigos/iac-drift/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/iac-drift/Repositories represent environments only when differences are reconciled.Sat, 12 Sep 2026 00:00:00 +0000Input validation: valid format does not guarantee meaninghttps://thiago.limaesilvatecnologia.com.br/en/artigos/input-domain/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/input-domain/Rules must understand the operation's domain.Sat, 12 Sep 2026 00:00:00 +0000BOLA and IDOR: review the actual objecthttps://thiago.limaesilvatecnologia.com.br/en/artigos/object-authorization/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/object-authorization/Knowing an identifier is not authorization evidence.Sat, 12 Sep 2026 00:00:00 +0000JWT: trust extends beyond signatureshttps://thiago.limaesilvatecnologia.com.br/en/artigos/jwt-trust/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/jwt-trust/Each consumer must know which tokens it may accept.Sat, 12 Sep 2026 00:00:00 +0000Key management: plan retirement before rotationhttps://thiago.limaesilvatecnologia.com.br/en/artigos/key-retirement/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/key-retirement/Changing the active key does not end historical dependencies.Sat, 12 Sep 2026 00:00:00 +0000Kubernetes: namespaces do not finish isolation analysishttps://thiago.limaesilvatecnologia.com.br/en/artigos/kubernetes-tenancy/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/kubernetes-tenancy/Boundaries must account for shared resources.Sat, 12 Sep 2026 00:00:00 +0000Prompt injection: keep authority outside retrieved texthttps://thiago.limaesilvatecnologia.com.br/en/artigos/prompt-injection-boundary/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/prompt-injection-boundary/External documents may inform answers without granting permissions.Sat, 12 Sep 2026 00:00:00 +0000Logs: start with the incident questionhttps://thiago.limaesilvatecnologia.com.br/en/artigos/logging-evidence/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/logging-evidence/Event volume is not investigation capability.Sat, 12 Sep 2026 00:00:00 +0000MCP: tool changes are trust changeshttps://thiago.limaesilvatecnologia.com.br/en/artigos/mcp-tool-change/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/mcp-tool-change/An agent's tool catalog needs governance.Sat, 12 Sep 2026 00:00:00 +0000Microservices: preserve decision context when delegatinghttps://thiago.limaesilvatecnologia.com.br/en/artigos/microservice-delegation/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/microservice-delegation/Technical identity alone does not explain the user's request.Sat, 12 Sep 2026 00:00:00 +0000Multitenancy: extend isolation into the cachehttps://thiago.limaesilvatecnologia.com.br/en/artigos/tenant-cache-isolation/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/tenant-cache-isolation/Correct database and API controls cannot fix ambiguous cache keys.Sat, 12 Sep 2026 00:00:00 +0000MFA: track exceptions as carefully as adoptionhttps://thiago.limaesilvatecnologia.com.br/en/artigos/mfa-exceptions/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/mfa-exceptions/High coverage can conceal important alternative paths.Sat, 12 Sep 2026 00:00:00 +0000Segmentation: review permitted outbound traffichttps://thiago.limaesilvatecnologia.com.br/en/artigos/network-egress/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/network-egress/Connection destinations are part of the exposure boundary.Sat, 12 Sep 2026 00:00:00 +0000OAuth: distinguish clients before designing the flowhttps://thiago.limaesilvatecnologia.com.br/en/artigos/oauth-client-boundaries/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/oauth-client-boundaries/Mobile apps, browsers and backends have different boundaries.Sat, 12 Sep 2026 00:00:00 +0000Passwords: modernization needs a migration planhttps://thiago.limaesilvatecnologia.com.br/en/artigos/password-migration/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/password-migration/Changing the standard does not update every account.Sat, 12 Sep 2026 00:00:00 +0000Dynamic queries: separate values from structure choiceshttps://thiago.limaesilvatecnologia.com.br/en/artigos/query-contracts/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/query-contracts/Flexible filters need a bounded contract.Sat, 12 Sep 2026 00:00:00 +0000RAG: revocation must reach retrievable contenthttps://thiago.limaesilvatecnologia.com.br/en/artigos/rag-revocation/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/rag-revocation/Removing source access may leave usable copies.Sat, 12 Sep 2026 00:00:00 +0000REST APIs: protect operation orderhttps://thiago.limaesilvatecnologia.com.br/en/artigos/rest-state-machine/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/rest-state-machine/Individually correct endpoints can form an incorrect workflow.Sat, 12 Sep 2026 00:00:00 +0000SAML SSO: rehearse trust changeshttps://thiago.limaesilvatecnologia.com.br/en/artigos/saml-certificate-change/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/saml-certificate-change/Integrations must survive certificate changes.Sat, 12 Sep 2026 00:00:00 +0000Secrets: emergency rotation must work under pressurehttps://thiago.limaesilvatecnologia.com.br/en/artigos/secret-emergency-rotation/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/secret-emergency-rotation/Central storage does not replace rehearsed revocation.Sat, 12 Sep 2026 00:00:00 +0000AI models: record what actually changed in a releasehttps://thiago.limaesilvatecnologia.com.br/en/artigos/model-release-evidence/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/model-release-evidence/Behavior depends on more than the model file.Sat, 12 Sep 2026 00:00:00 +0000AWS and GCP: turn shared responsibility into taskshttps://thiago.limaesilvatecnologia.com.br/en/artigos/cloud-responsibility/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/cloud-responsibility/Assign ownership for each control.Sat, 12 Sep 2026 00:00:00 +0000Code review: prioritize trust-changing modificationshttps://thiago.limaesilvatecnologia.com.br/en/artigos/code-review-risk/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/code-review-risk/Diff size does not measure security impact.Sat, 12 Sep 2026 00:00:00 +0000AI-generated code: acceptance remains an engineering decisionhttps://thiago.limaesilvatecnologia.com.br/en/artigos/ai-code-acceptance/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/ai-code-acceptance/Generation speed does not replace behavioral understanding.Sat, 12 Sep 2026 00:00:00 +0000Secure design: defaults are product decisionshttps://thiago.limaesilvatecnologia.com.br/en/artigos/secure-product-defaults/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/secure-product-defaults/The easiest path often determines actual behavior.Sat, 12 Sep 2026 00:00:00 +0000SSRF: fetching a URL grants network capabilityhttps://thiago.limaesilvatecnologia.com.br/en/artigos/ssrf-fetch-service/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/ssrf-fetch-service/The feature needs destination and behavior boundaries.Sat, 12 Sep 2026 00:00:00 +0000Sessions: interface logout must match access statehttps://thiago.limaesilvatecnologia.com.br/en/artigos/session-revocation/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/session-revocation/Logout becomes distributed across multiple consumers.Sat, 12 Sep 2026 00:00:00 +0000Supply chain: release the artifact that was assessedhttps://thiago.limaesilvatecnologia.com.br/en/artigos/supply-chain-promotion/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/supply-chain-promotion/Rebuilding at the last step can change the trust unit.Sat, 12 Sep 2026 00:00:00 +0000Threat modeling: end with testable decisionshttps://thiago.limaesilvatecnologia.com.br/en/artigos/threat-model-decisions/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/threat-model-decisions/Useful diagrams connect threats to actions and owners.Sat, 12 Sep 2026 00:00:00 +0000Transactions: confirmation must represent executionhttps://thiago.limaesilvatecnologia.com.br/en/artigos/transaction-integrity/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/transaction-integrity/Users should authorize the parameters producing the effect.Sat, 12 Sep 2026 00:00:00 +0000TLS: review the full path to the data consumerhttps://thiago.limaesilvatecnologia.com.br/en/artigos/tls-full-path/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/tls-full-path/The browser padlock describes only part of the architecture.Sat, 12 Sep 2026 00:00:00 +0000Privacy by architecture: remove unnecessary datahttps://thiago.limaesilvatecnologia.com.br/en/artigos/privacy-minimization/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/privacy-minimization/Minimization starts before storage protection choices.Sat, 12 Sep 2026 00:00:00 +0000Vulnerabilities: prioritize the affected-system decisionhttps://thiago.limaesilvatecnologia.com.br/en/artigos/vulnerability-priority/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/vulnerability-priority/Component severity is an input, not the whole context.Sat, 12 Sep 2026 00:00:00 +0000AI agents: define the approval contract before granting autonomyhttps://thiago.limaesilvatecnologia.com.br/en/artigos/agentic-security-approval-contracts/https://thiago-silva-cyber.vnb2kgrpj6.chatgpt.site/en/artigos/agentic-security-approval-contracts/The agent security debate calls for a concrete architecture decision: which changes may an agent execute without approval?Mon, 07 Sep 2026 00:00:00 +0000