Zero Trust: verify explicitly, use least privilege, assume breach

Scenario: contractor for 2 days

Make access intentional: specific, limited, and time-bound. Grant access to one specific resource. Limit permissions to the task. Set a short time window (2 days). Avoid broad 'just in case' access.