Multi-Tenant Validator

Rules

• ALWAYS include schoolId in queries
• Unique constraints scoped by schoolId
• Verify session before operations

Checklist

• [ ] schoolId in all queries
• [ ] Unique constraints scoped
• [ ] Session verified