One read-only door between forty workers and the vault

Forty worker containers need the model weights and the rules bundle. None of them should be able to change it, and none should see what else the vault holds.

The vault container shares one directory: POST /storage/shares with source_path: /srv/bundle, mode: readonly, target_project_id set to the workers' project. The share auto-mounts on every container in that project. Workers read the bundle as a local path. They cannot write to it. They cannot reach /srv/keys next to it, because the share is the directory, not the container.

Before the share, a worker sees nothing of the vault. After it, a worker sees one folder, read-only. Revoke the share and the folder is gone from forty machines at once.

No NFS export, no ACL spreadsheet. Isolation with exactly one door, and the door only opens one way.

Isolation with exactly one door, and the door only opens one way.