clean-architecture-backend-template/docs/runbooks/authz-tenant-mismatch.md

title, category, error_codes, severity, owner, last_updated, status

title	category	error_codes	severity	owner	last_updated	status
Runbook — AUTHZ_TENANT_MISMATCH (테넌트 cross-access 시도)	AUTHZ	AUTHZ_TENANT_MISMATCH	P1	oncall	2026-06-15	stub

Runbook: AUTHZ_TENANT_MISMATCH (runbook://authz/tenant-mismatch)

Symptoms

• HTTP 403 with error.code=AUTHZ_TENANT_MISMATCH
• log_level=ERROR — cross-tenant access attempt detected

Diagnosis

• Extract traceId, check X-Tenant-Id vs token tenant claim
• Determine if this is misconfigured client or intentional attack

Action

• Block repeat offenders at gateway level
• Alert security team for investigation

Escalation

• P1 if confirmed malicious cross-tenant access attempt

---

Stub: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)