row-level-security

Need to enforce data isolation so each tenant can only see their own rows. Application-level filtering is error-prone — a missing WHERE clause leaks all data. Want database-enforced isolation.