Hierarchical multi-tenancy

Three nested scopes share what makes sense, isolate what must be, and meter everything.