Summary
Documented patterns for many tenants: a shared table with a tenant column, a namespace per tenant, or a bucket per tenant, with their isolation and cost, plus credential vending and per-tenant retention, rollups and quotas.
Design
Documented patterns with trade-offs and examples:
| Pattern | Isolation | Cost / ops | When |
|---|---|---|---|
Shared table, tenant partition column | Row-level (enforced by catalog/engine policies) | Cheapest | Many small tenants |
| Namespace per tenant | Catalog-level ACLs | Low | Tens to thousands of tenants |
| Warehouse/bucket per tenant | IAM + per-tenant KMS keys | Higher | Regulated / enterprise tenants |
Plus examples for credential vending via the REST catalog, per-tenant retention and rollups, and per-tenant ingestion quotas.
Open questions and issues
History
- 2026-10-11: specified (SPEC.md §14)
- 2026-10-19: moved from SPEC.md into its own spec.
- 2026-10-19: was spec 29; specs regrouped one per feature, with milestones on the roadmap.