Conf42 DevSecOps 2026: a model for reasoning about tenant blast radius on Kubernetes, with cells, directional gateways, and where network isolation ends and RBAC/ABAC has to take over.
