Multi-Tenant IsolationPrisma RLS • Zero-Trust APIM
PostQodeJul 2025 – Present
Multi-tenant AI agent marketplace
A marketplace of agents is a tenancy and supply-chain problem before it is an LLM problem. One unscoped query, or one shared network path, collapses trust.
35
Tenant-scoped models
Two-layer isolation across a 100-model backend
61routes
Backend surface
CI blocks any unscoped query before merge
~232services
Service graph
Invariants across 21 domains: tenancy, imports, OpenAPI/DB drift
Isolation stack Engine Pipeline
Edge01
- Front Door
- APIM
Network02
- VNet isolation
- Private-endpoint SQL
Application03
- Prisma middleware
- Session-context RLS
- LRU + Redis licenses
Delivery04
- ARM orchestrator
- Automated rollback
- Trivy / SBOM / Notation
Architectural Blueprint & Narrative
Prisma middleware plus SQL Server row-level security via session context on 35 tenant-scoped models. CI guards fail any unscoped query. Azure Front Door, APIM, full VNet isolation, and private-endpoint SQL sit in front of an ARM orchestrator that deploys into buyer subscriptions with automated rollback. License checks use an in-process LRU plus Redis. Trivy, SBOM, and Notation signing run on every image. Architecture invariants cover a 21-domain, ~232-service codebase.
Key Production Invariants
- Prisma middleware + SQL Server session-context RLS applied to 35 of 100 models.
- Automated CI lint rule blocking any query lacking tenant context before merge.
- Azure Front Door, APIM token rate limits, and private-endpoint SQL across 21 domains.
Verified Production Deliverables
- Defense-in-depth isolation across a 100-model, 61-route backend.
- ARM template orchestrator deploying agents directly into buyer Azure subscriptions.
- Automated image vulnerability scanning via Trivy, Syft SBOM, and Notation signing.
PrismaSQL Server RLSAzure Front DoorAPIMVNet isolationARMRedisTrivySBOMNotation
Read complete technical case study