a Run / Session is scoped to a Tenant (multi-tenancy attribution at the unit-of-work level — distinct from owns_workspace which is durable ownership)