Run multiple customers on one stack, without anxiety.

Tenant isolation is enforced in three places: repository queries that scope every read to the current tenant, a save-changes interceptor that refuses cross-tenant writes, and an integration test suite that proves the isolation against a real Postgres on every CI run. Built for the agency and SaaS-builder use case from day one.

• Three-layer isolation: scoped queries, write interceptor, automated tests
• Database-backed authorization (a JWT alone is never enough)
• Tenant-scoped audit log, secrets and run history