All skills
tenant-isolation
FoundationJIT onlyUse for cross-layer tenant isolation. Skip policy-only and SaaS-product lifecycle work.
- Group
- Security & privacy
- Supported roles
- MainAnalysisTaskReview
- Source
- SKILL.md
Use when
Trigger signals that make this skill the right owner
- tenant isolation across storage caches queues execution context search telemetry operations migrations deletion export backup or restore changes
Do not use when
Anti-triggers — as binding as the triggers above
- authorization-policy-only work or SaaS lifecycle billing entitlement and customization work without an isolation mechanism change
- no tenant identity propagation isolation or privileged lifecycle boundary changes
Required inputs
What must be supplied before this skill can decide anything
- current task contract
- selected primary Professional Skill
- task-local trigger evidence
Output contract
What this skill owes the next role
- tenant-isolation decision with context authority surfaces mechanisms privileged lifecycle negative proof limits and residual owners
Escalation signals
When this skill must hand the decision back
- tenant identity authority propagation shared-state separation privileged access or lifecycle isolation remains unresolved
Loaded by
This skill never owns a task. These professionals may pull it in as Layer 3.
Targeted references
Each reference carries its own load condition. None of them enter context by default.
| Reference | Load when | Do not load when | Required by |
|---|---|---|---|
| data-storage-cache-and-search-isolation.mdtargeted | Database key query cache object or search-index isolation remains unresolved | No stored cached object or indexed tenant boundary changes | AnalysisTaskReview |
| async-queue-and-execution-context-isolation.mdtargeted | Tenant provenance crosses messages jobs callbacks workers retries replays or shared compute | No asynchronous or compute-context tenant boundary changes | AnalysisTaskReview |
| operations-telemetry-and-lifecycle-isolation.mdtargeted | Admin support telemetry migration backfill export deletion restore or control-plane paths change | No privileged operational or tenant lifecycle data path changes | AnalysisTaskReview |