Expanded capabilities
- Provide PostgreSQL/Prisma durable storage for tenant-owned rows
- Support migrations and inspectable execution state
- Enforce tenant isolation at the data plane
- Back WORKFLOW, approvals, audit, and knowledge artifacts
- Never accept client-supplied tenantId as sole authority




