Concepts

Tenancy

Each operator organization is a tenant. A tenant owns its domains, brand, members, enabled modules, API keys, billing plan, runtime providers, and product configuration.

Tenant boundary

• Console users authenticate with hosted auth and join tenant workspaces through membership records.
• End users can come from hosted auth, BYOA/OIDC providers, guest tokens, or product-specific identity systems, then resolve to tenant-scoped RTIE actors.
• API keys are scoped to one tenant and one set of module permissions.
• Events always include tenant, actor, provider, policy, and trace context.