Security

Tenant store

The store is keyed. Unprobed isolation is unlabeled — never painted certified.

Need. Rows that leak across workspaces.

How EngOS does it. Helix tenant-store is not WAL ACID. MULTI_AZ=false. Cross-tenant checkpoint is denied and logged.

Swarm. A ticket that names another tenant is halted, not merged.

Roles. AI Infrastructure Engineer · Data Engineer for AI

Tools. perimeter · trace

Honesty. tenant-store is not a Postgres replacement. Not DuckDB.