Row-level security
Also written: RLS, WHERE tenant_id = ?, tenant_id
A database rule that hides rows from the wrong tenant, so a bug in a tool's query isn't enough to leak another café's data. Every Ask Counter tool also adds WHERE tenant_id = ?, with the ID taken from the sign-in token, never the prompt.