Tenant = consistency boundary
ACID stays inside a tenant. Forks, snapshots, and residency are engine operations. Cross-tenant work is CDC and sagas — never a distributed transaction pretending to be local.
A clean-room local database engine and pipe-based query language — tenants as first-class primitives, types at edit time, storage that stays out of the way.