- Shipped
- June 26, 2026 at 1:59 AM UTC
- Author
- Kamo
- Commit
- 93710ad
Roadmap 0.10: **************** (the per-tenant consumer subscription seam) + belongsToTenant(subject,orgId) token-wise matching that mirrors NATS filtering; forEvent now rejects non-positive orgId (no events without a tenant). MlosTenantIsolationTest is the executable cross-tenant gate (incl token-boundary: org 12 never matches org 123). MlosDeadLetterRepository gains an org-scoped steward finder (repo-layer org-scope guard) alongside the operator-gated cross-tenant one. Per-tenant scope on X-Internal-Auth hops is estate-wide and deferred to the auth keystone; a live-broker isolation test follows with the first concrete consumer.