Security
Arc Enterprise access and trust controls: organizations, teams, and measurement-level RBAC, audit logging for compliance, and shared-secret plus TLS between cluster nodes.
Arc OSS authenticates with API tokens that are effectively all-or-nothing. Arc Enterprise adds structure above them and a trust boundary below them.
Above: RBAC attaches organizations, teams, and roles to those tokens, down to per-measurement permissions, and audit logging records who did what. Below: nodes authenticate to each other with a shared secret and encrypt inter-node traffic with TLS, so cluster membership is not implied by network reachability alone.