Depot's API overview recommends separate projects for untrusted customer builds to isolate caches. In a Depot Builds integration, decide the tenant boundary before optimizing cache reuse.
Rehearse two customers building similar inputs without sharing private files or credentials. A fast cached build is not sufficient evidence that the surrounding isolation model is appropriate for a multi-customer service.
Akousa