Tenant isolation: Control specification

Defines tenant isolation as an end-to-end invariant across identities, database queries, object storage, search, caches, queues, exports, logs, and administration, with deny-focused verification.

Published Sep 12, 2026