Platform
Tenant isolation, explained
Isolation is the one property of a multi-tenant system that cannot be partially true. A platform with one leaking endpoint out of six hundred is not mostly isolated; it is not isolated, because an attacker only has to find the one. This makes it unusual among security properties: it can, in principle, be tested exhaustively.
How Enclessa uses it
Enclessa asserts the organisation at one choke point and answers not-found for another organisation’s object. A probe suite generated from the OpenAPI document drives every operation across the boundary — 286 operations driven, 286 refused — and it runs in continuous integration, so a regression fails the build rather than reaching production. Files, audit records, metrics and log lines all carry the organisation they belong to.