A namespaced "FeatureFlagSource" or "InProcessConfiguration" resource can be referenced cross-namespace via the "openfeature.dev/featureflagsource" annotation using the documented "{NAMESPACE}/{NAME}" syntax. The operator resolves the referenced resource cluster-wide and materializes its contents (env vars, flagd sidecar arguments including "httpSyncBearerToken", sync URIs, supporting ConfigMaps) into the referencing workload. On multi-tenant clusters that treat namespaces as trust boundaries, a tenant who can deploy a controller-owned workload in their own namespace can cause the operator to read another tenant's "FeatureFlagSource" / "InProcessConfiguration" spec contents.