mirror of
https://github.com/stablyai/orca.git
synced 2026-09-29 16:02:50 +00:00
The production domain-restricted-sharing policy rejects an allUsers run.invoker member, which the runbook anticipated. Opt the service out of invoker IAM the way the relay director already does; the host proof is the authentication either way.