AsyncLocalStorage Is Not a Security Boundary: Building Safer Multi-Tenant NestJS Applications

A practical distinction between carrying a tenant ID and deciding whether a caller may use it. ...