Tenant isolation belongs in the database, not in the application code
Freehold enforces workspace separation with Postgres row-level security and logs who performed each sensitive action. For a desk holding wire instructions and client logins, the difference between those two places is most of the argument.