Fetch-path verification: target-side tag/sentinel validation plus caller attestation. A cross-script namespace binding supplies the target object's env, so the request credential is what proves the source Worker belongs to the same deployment.
Fetch-path verification: target-side tag/sentinel validation plus caller attestation. A cross-script namespace binding supplies the target object's env, so the request credential is what proves the source Worker belongs to the same deployment.