Tenant isolation failures are authorization failures. Not configuration failures, not framework failures, not database failures. This is a catalogue of how they happen, why they're hard to see coming, and what the underlying patterns actually look like.