Notes & essays.

Tenant isolation is a schema decision, not a middleware one

Why I enforce multi-tenant isolation at the query layer instead of trusting request-scoped guards — and what breaks when you don't.