- Status: Accepted (2026-08-22)
- Roadmap reference: AD1
Multi-tenant options range from stack-per-tenant (perfect isolation, minutes-long provisioning, idle cost floor per free user) to pooled (one deployment, row-level ownership).
One pooled production stack; tenancy enforced at the data layer via user-keyed partitions and a deny-by-default repository layer. The CDK app remains fully parameterized so a dedicated-stack enterprise tier can be added later without rework.
- Provisioning is seconds, free-tier idle cost is ~zero, and there is one deploy surface.
- Isolation bugs become the top engineering risk; mitigations are mandatory and merge-gated (adversarial cross-tenant test suite, roadmap M2.3).