Vault
Tenancy and isolation
Why a leaked file id is worthless to anyone else.
Tenant scope
Every request is scoped by (app, origin_tenant); the tenant is derived from the authenticated DevSewa application, never accepted from the request. A file from another tenant answers 404 file_not_found, identical to a file that does not exist.
User ids
Up to 180 characters from A–Z a–z 0–9 . _ @ : + -. The id stays exactly as your application knows it; tenant isolation is a separate signed field.
Delegated storage · lab only
Tenant quota allocation, nested logical areas and usage reporting are disabled in production. The lab integration must not be promoted until Trusted direct uploads reconcile every quota-bearing ancestor area.