The database enforces it, not a convention
One ISP cannot read another's data because Postgres refuses, not because every query remembered a filter. Our cross-tenant tests are written as attacks, because a policy that is merely present proves nothing.



