01
One pod per tenant#
Create a pod at tenant onboarding, store the pod ID, and create tenant inboxes with pod_id.
02
Scoped credentials#
Give tenant agents the pod-scoped key returned at pod creation. Keep account-wide keys only in trusted backend infrastructure.
03
Event isolation#
SSE and API reads honor key scope. Customer webhooks belong to the account and can only be managed with an account key, so filter payloads by inbox_id in a multi-tenant receiver.