Mistral Multi-Environment Isolation
Overview
Prevent development changes from consuming production data, budget, capacity, or state. Make environment identity explicit in secrets, resources, telemetry, artifacts, and promotion evidence.
Prerequisites
- An environment inventory and accountable owners.
- Secret, budget, data, model, endpoint, and state isolation requirements.
- A promotion path with synthetic staging tests and production rollback.
Current Contract
Limits are workspace-shared across keys, so extra keys do not guarantee capacity isolation. Organization/workspace, role, limit, and billing controls must be inspected.
Authentication
Use distinct environment secret references and narrow workspace identity. Fail closed if runtime environment and secret metadata disagree.
Instructions
- Inventory each environment's workspace, key owner, secret, data class, models, endpoints, and state.
- Decide separate-workspace needs from capacity, spend, admin, and data isolation.
- Encode non-secret environment identity and allowed surfaces in reviewed config.
- Block production identifiers, files, workflow IDs, and overrides from non-production.
- Promote one immutable artifact through offline, staging, and approved canary evidence.
- Test rotation, wrong-environment denial, cap exhaustion, rollback, and orphan reconciliation.
Tool Discipline
Use Read, Glob, and Grep to inspect code, locks, configuration, tests, and evidence. Use Write and Edit only for approved repository changes. Invocation alone does not authorize network calls, paid usage, uploads, stateful resources, admin mutations, deployments, or deletion.
Approval Boundaries
Workspace or key creation, roles, budget or limit changes, production secret access, promotion, and deletion require administration approval. Record each mutation against its environment owner.
Error Handling
- Multiple keys in one workspace still share rate boundaries.
- Production fixtures in staging can violate data policy.
- Mutable deployment artifacts invalidate promotion evidence.
Output
Return environment matrix, workspace/secret mapping, allowed surfaces, caps, promotion state, isolation tests, owners, and rollback.
Examples
- Use separate production capacity while development uses synthetic fixtures.
- Reject a staging runtime resolving a production-labeled secret.
Validation
Attempt cross-environment secret, model, file, workflow, and telemetry access; prove denial, rotation, promotion, and rollback.
Resources
- Current first-party evidence map — recheck dated sources before relying on mutable endpoints, models, limits, prices, preview status, or retention.
- Record live account observations as environment-specific evidence, not universal Mistral guarantees.
