Keep Prisma Queries Inside the Right Customer Account: 7 Checks

A tenant-isolation review may start with one question: “Does every query include tenantId?” That catches the obvious failure and misses several others. A filter can exist but come from the client. It