Run multiple customers on one stack, without anxiety.

Tenant isolation is enforced in three places: an EF Core query filter that scopes every read, a save-changes interceptor that refuses cross-tenant writes, and an integration test suite that proves the isolation against a real Postgres on every CI run. Built for the agency and SaaS-builder use case from day one.

• Three-layer isolation: query filter, write interceptor, automated tests
• Database-backed authorization (a JWT alone is never enough)
• Tenant-scoped audit log, secrets and run history