Annual tenant product contract

A branded library requires real isolation.

The tenant, branding, domain, and isolation contracts are modeled. White Label storefront provisioning, custom-domain activation, commerce, and tenant analytics remain unavailable until their production flows pass independent verification.