How Harmonia uses it
Firebase Authentication establishes operator identity and workspace membership. IAM service accounts identify Cloud Run and automation workloads. Secret Manager keeps provider credentials server-side; browsers receive neither integration secrets nor machine credentials.
Firebase Authentication
Operator authentication and tenant scope.
IAM service accounts
Machine identity and least privilege.
Secret Manager
Credential storage and delivery.
Evidence status
Repository policy and tests verify access checks locally. Production IAM grants, secret versions, and authenticated access must be verified in the target project without exposing secret values.Firebase Authentication
How Google sign-in establishes Harmonia operator identity and tenant scope.
IAM and service accounts
How Harmonia separates web, worker, Pub/Sub, and Scheduler identities with least privilege.
Secret Manager
How Harmonia supplies provider credentials to Cloud Run without placing secrets in code or client bundles.
Last modified on August 28, 2026
