It is a query. It works. It returns data from the wrong customer. Do not put tenant scope in the prompt. Telling an AI to only answer for one customer is a preference. It is not a boundary. Models ...