Security
Auth
Session is the tenant. Guest is named. Enterprise never /login.
Need. A login that pretends to be tenancy.
How EngOS does it. Better Auth session when enabled. Signed-in userId is the tenant key. Guest analog is labeled. Isolation-prove tenants stay explicit.
Swarm. Talk Route sits the security desk when the ticket names access, not when a stranger hits /login.
Roles. AI Security Specialist · AI Solutions Architect
Tools. perimeter · inject · redact
Honesty. Enterprise CTA is /sales. plan=pro redirects to plan=team. No fake SSO badge.
All eight · Tenant store · Isolation · Art. 50 · Observe-by-default · Export · Air-gap · Report