Backend enforcement: Enforcement architecture

One policy enforcement point applies tenant-scoped row filters to queries, search, exports, jobs, and aggregates, fails closed on missing context, and never treats a client-supplied tenant id as authority.

Published Sep 12, 2026