Today I finalized tenant-aware access across all core modules using a shared ScopedRepository abstraction. This was the largest refactoring effort so far: 12 modules, 80+ unit tests, and one generic strategy to guarantee data isolation via subscriber_id.