Every requirement on authorisation, district-scoped data isolation, and tenant separation (Blueprint Ch 03 multi-tenancy principle). The compliance surface.