Tenant-boundary security examples

The Laravel tenant route demonstrates defense in depth: scoped binding limits lookup and a policy authorizes the actor. The full validation, authorization, and tenant-boundary reference carries that invariant through queries, writes, jobs, cache, storage, exports, search, and logs.

A useful review question is: “Which identifier is attacker-controlled, and where is ownership re-established?”

The Sanctum authentication-boundary example shows why a valid credential, token ability, resource policy, and tenant-scoped lookup are separate checks.