The Fibe security model: scopes, sessions, secrets, and 2FA
· 10 min read
Fibe hands every Player a Docker host and lets agents, CLIs, and browsers spin up real environments on it. That is a lot of power to lend out over an API, and the whole platform leans on a small set of identity primitives doing their job quietly: a key that can only do what it says, a session that actually expires, a vault that never hands back a plaintext it didn't have to, and a log nobody can rewrite after the fact.
None of this is glamorous, and that's the point — it's the part of the system we want boring and correct.