Tenant isolation

Every operational read and write is evaluated against the caller's authorized workspace using row-level security in the database, not only in application code. Authorization is fail-closed: unproven access is denied.

• A user only sees workspaces they are genuinely authorized for.
• An API key only reaches its own workspace, environment and granted programs.
• No surface aggregates operational data across workspaces.