#databasearchitecture

I Built Multi-Tenancy on Day 2. On Day 67, I Rebuilt It

I thought adding org_id to every table meant bulletproof multi-tenancy. Then my security audit revealed agencies were writing to SME tables—not through a bug, but by design.