Founded and architected a multi-tenant occupational health and safety backend in Rust.
Tenant isolation is enforced in the database and not in the application. Every query runs as a role the tenant owns, and PostgreSQL row-level security decides what that role can see — so a missing filter in application code is a query that returns nothing rather than a query that returns somebody else’s records. SQLx checks each query against the schema at compile time, so a column that moved is a build failure and not a runtime one. Axum carries the HTTP surface, real-time updates go over WebSocket, and the admin surface is server-rendered with HTMX.
The drawing is the argument.