cross-tenant-data-leak-tests

Overview

Plan first, then implement. The planning section below produces the surface × pattern coverage matrix; the numbered steps produce the executing tests - the actual code that fails the build when isolation breaks.

The contract:

• Each test fixtures two disjoint tenants (A, B).
• Each test exercises one (surface, pattern) cell.
• Each test asserts denial of cross-tenant access.
• The suite runs as part of CI on every PR.
• A single failure blocks merge.

When to use