Exposure of cross-tenant resource identifiers and limited session metadata. No content modification or PII exfiltration observed in logs.
Introduced tenant-bound resource guards, enforced token org binding at the gateway, and added server-side authorization checks across list/detail endpoints.