feat(security): the tenant scope — the level between operator and workspace - #385

Merged

BechsteinDigital merged 5 commits into

mainfrom

feat/tenant-scope

Sep 3, 2026

Commits on Sep 3, 2026

feat(security): a tenant is something you can administer

BechsteinDigital
and
claude
committed
2ccc041
feat(security): the tenant scope, and the trap it must not reopen

BechsteinDigital
and
claude
committed
6ba2557
feat(security): close the persistence backstop for tenant sessions

BechsteinDigital
and
claude
committed
7bff0fc
feat(security): what a TenantAdmin may do, and what it may not

BechsteinDigital
and
claude
committed
95b6410
feat(security): a tenant admin can sign in, and the plugin keys reach the token

BechsteinDigital
and
claude
committed
d076bca