Approved prose stays in its org, and only the SI rights reach an SI's prose — a built-in archetype's row is stored as builtin:<orgId>:<NAME> and upsertApproved's DO UPDATE writes only a row of the same org (a cross-org key answers 503, never a cross-org write), rows of another org are never read; a preview keeps the stamp's copy only for a caller who could save that personality onto an SI, a model's prose never replaces a person's kept copy (one Redis step), and PUT …/prose refuses a person (409...