cross-tenant-data-leak-tests

Overview

The runtime CI gate. While tenant-leak-test-author produces the plan (which surfaces, which patterns), this skill produces the executing tests - the actual code that fails the build when isolation breaks.

The contract:

• Each test fixtures two disjoint tenants (A, B).
• Each test exercises one (surface, pattern) cell.
• Each test asserts denial of cross-tenant access.
• The suite runs as part of CI on every PR.
• A single failure blocks merge.

When to use