Exact tenant ownership of a memory id — delegates to the ONE salted-id
ownership predicate (tenantOwnsSaltedId) so memory and run ownership can
never drift. Exact because the '' delimiter cannot occur
inside a tenantId, so 'acme' can never own 'acmecorp...'. Assert on EVERY
memory read/write path.
Exact tenant ownership of a memory id — delegates to the ONE salted-id ownership predicate (
tenantOwnsSaltedId) so memory and run ownership can never drift. Exact because the '' delimiter cannot occur inside a tenantId, so 'acme' can never own 'acmecorp...'. Assert on EVERY memory read/write path.