Skip to content

Database-enforced tenant isolation

Row-level security is enabled and forced on every tenant table, with no runtime owner or bypass role, and it is checked in CI and at every start. It is an engineering control, not an attestation.