Security

Auth

Session is the tenant. Guest is named. Enterprise never /login.

Need. A login that pretends to be tenancy.

How EngOS does it. Better Auth session when enabled. Signed-in userId is the tenant key. Guest analog is labeled. Isolation-prove tenants stay explicit.

Swarm. Talk Route sits the security desk when the ticket names access, not when a stranger hits /login.

Roles. AI Security Specialist · AI Solutions Architect

Tools. perimeter · inject · redact

Honesty. Enterprise CTA is /sales. plan=pro redirects to plan=team. No fake SSO badge.

All eight · Tenant store · Isolation · Art. 50 · Observe-by-default · Export · Air-gap · Report

EngOS