Tenant isolationEvery memory is scoped to a tenantId. Enforced at the query level — not the app level.