In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which

In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafte

Apache Polaris accepts literal * characters in namespace and table names. When it later builds temporary S3 access policies for

Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table lo