Workspaces
Specification
Project workspaces must be isolated from each other and the internet to prevent unauthorised access to data and resources, regardless of the underlying infrastructure. Intra-project shared services must only be accessible to users within the same project.
Last updated: 2025-11-25
Source: N/A
Implementation Compliance
K8TRE Reference Implementation
TREu
In TREu, Projects are isolated from each other at the network level, preventing inter-project transfers. Different projects use separate file systems and are mounted exclusively into project desktops, available only to the users of that project. TREu does not currently support the provision of shared services within Projects.
FRIDGE
SATRE components realised by this statement
Component 2.1.8
SATRE requires TRE operators to ensure that any shared services are only available to users working on the same project, so K8TRE components which facilitate shared services must support this project-level isolation.