Concept
Tenant
The isolation boundary: one organization's policies, receipts and data.
Definition
A tenant is one customer's space. Its policies, receipt stream, intel and evidence are separate from every other tenant's. The public check endpoint uses the shared tenant try, which holds no customer data.
Shape
// ReceiptBody.tenant
tenant: string; // "try" for POST /v1/checkInvariants
| Invariant | Checked by |
|---|---|
| Another tenant's records neither extend nor verify in this tenant's stream. | packages/transparency/src/audit-chain.test.ts: "streams are per tenant" |
| Private intel is per tenant. | packages/hydra/src/slow.test.ts: "private intel is per tenant" |
| No raw indicator leaves the tenant in federation. | packages/connectors/src/federation.test.ts: "no raw indicator leaves the tenant" |
Out of scope
- Cross-tenant analytics. Federation shares derived signals only, never raw indicators.