Glossary

Term	Definition
Tenant	An organization or team using the platform. All data is scoped to a tenant.
Principal	An authenticated user or service making a request.
Scope	A permission boundary (e.g., read:users, write:billing).
Token	A JWT issued by the auth service, containing principal ID, tenant ID, and scopes.