I've Been Shipping 'Multi-Tenant' Wrong for a Decade

Every system I built had a tenant_id column and a discipline problem. This is the first one where the database itself refuses to return the wrong rows.