wf-laravel-tenant-access-guardrails

Audit Laravel routes for tenant access guardrails and generate compliance reports.

Updated Nov 7, 2025
One-click install
npx skills add https://github.com/belluga/delphi-ai --skill wf-laravel-tenant-access-guardrails
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wf-laravel-tenant-access-guardrails
Source: https://github.com/belluga/delphi-ai/tree/main/skills/wf-laravel-tenant-access-guardrails
Command: npx skills add https://github.com/belluga/delphi-ai --skill wf-laravel-tenant-access-guardrails

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Tenant-authenticated routes often suffer from gaps in access checks. This skill provides a structured workflow to ensure every authenticated endpoint enforces tenant access via CheckTenantAccess, reducing cross-tenant leakage and ambiguous boundaries.

Core Features & Use Cases

  • Enforces middleware guards on tenant routes to ensure CheckTenantAccess is present.
  • Validates route groupings (tenant vs main domain) and produces audit reports.
  • Provides tests to verify cross-tenant access and account isolation for tenant routes.

Quick Start

Audit your Laravel routes for tenant access guardrails and generate a compliance report.

Frequently Asked Questions about wf-laravel-tenant-access-guardrails

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce tenant access guardrails on Laravel routes to prevent cross-tenant data leakage?

You can enforce tenant access guardrails by auditing Laravel route groupings to ensure CheckTenantAccess middleware is present on tenant-scoped endpoints. This validates domain-aware routing and produces a compliance report verifying cross-tenant isolation.

What is the best way to audit Laravel middleware configuration for tenant-scoped endpoints?

Auditing Laravel middleware for tenant-scoped endpoints involves analyzing route matrices across tenant, admin, and public scopes to verify domain-aware routing. This process identifies missing access checks and generates a structured compliance report for policy validation.

How do I test cross-tenant access isolation in a Laravel multi-tenant application?

Testing cross-tenant access isolation in Laravel requires updating test suites to verify that authenticated endpoints enforce tenant boundaries correctly. This validates account isolation by checking middleware configuration and policy validation against tenant-scoped routes.

Does this workflow support validating route matrices across different domain scopes in Laravel?

Yes, validating route matrices supports tenant, admin, and public scopes in Laravel applications. It checks domain-aware routing configurations to ensure authorized tenant access, applying deterministic checks to guide code audits and compliance testing.

Why do tenant-authenticated Laravel routes still suffer from cross-tenant access gaps despite having middleware?

Tenant-authenticated Laravel routes suffer from cross-tenant access gaps when middleware configurations are incomplete or route groupings are ambiguous. Enforcing guardrails requires verifying CheckTenantAccess presence on every endpoint to reduce cross-tenant leakage and boundary ambiguity.

Can I generate a compliance report for Laravel tenant routes without modifying existing application code?

Generating a compliance report for Laravel tenant routes involves guiding code audits and route analysis without immediate code modification. It validates middleware configuration and policy compliance deterministically, identifying endpoints lacking proper tenant access checks.