---
id: TEN-WP-0004
type: workplan
title: "Production tenant authority runtime"
domain: infotech
repo: tenant-engine
status: finished
owner: codex
topic_slug: netkingdom
created: "2026-08-08"
updated: "2026-08-08"
---

# Production tenant authority runtime

Deploy the already-defined tenant authority and flex-auth policy behind the
user-engine platform portal with restart-safe persistence.

## Durable store and package

```task
id: TEN-WP-0004-T01
status: done
priority: high
```

Provide a durable runtime store, container image, and persistence tests.

Done 2026-08-09: SQLite-backed persistence on a 1 Gi RWO PVC, immutable image,
and restart-survival verification are complete.

## Production deployment

```task
id: TEN-WP-0004-T02
status: done
priority: high
```

Deploy flex-auth and tenant-engine with least-privilege networking and storage.

Done 2026-08-09: both services are Ready with namespace-scoped ingress/egress;
the live flex-auth-authorized create returned 201.

## Portal integration and live verification

```task
id: TEN-WP-0004-T03
status: done
priority: high
```

Align user-engine's adapter with the authority contract and prove tenant creation.

Done 2026-08-09: the deployed portal adapter created
`tenant:trial:portalcheck`; tenant-engine resolved it after a pod restart.