/**
 * ADR-001: Shared PostgreSQL with strict tenant_id scoping
 *
 * Status: Accepted
 * Date: 2026-08-10
 *
 * Context:
 * ARCHI is a multi-tenant SaaS. We need strong isolation without premature
 * infrastructure complexity (database-per-tenant).
 *
 * Decision:
 * Use a shared PostgreSQL database. Every tenant-owned table includes tenant_id.
 * All queries are scoped by trusted TenantContext. Optional RLS later as defense
 * in depth — never as a substitute for application authorization.
 *
 * Consequences:
 * + Simpler ops, migrations, and connection pooling
 * + Strong relational integrity and transactional onboarding
 * - Requires rigorous query discipline and isolation tests
 * - At very large scale, may evaluate schema/db isolation strategies
 */
