Designs tenant isolation strategies (row-level, schema-per-tenant, database-per-tenant) with correct tradeoffs, migration paths, and safety checks to prevent cross-tenant data leaks. Use when asked to "design multi-tenancy", "tenant isolation", "how do I separate tenant data", "SaaS data model", or "prevent cross-tenant leaks".
