---
id: TEN-WP-0004
type: workplan
title: "Production tenant authority runtime"
domain: infotech
repo: tenant-engine
status: finished
owner: codex
topic_slug: netkingdom
created: "2026-08-08"
updated: "2026-08-08"
state_hub_workstream_id: "41998481-ab3d-4200-9ece-33c5fc4294ea"
---

# Production tenant authority runtime

Deploy the already-defined tenant authority and flex-auth policy behind the
user-engine platform portal with restart-safe persistence.

## Durable store and package

```task
id: TEN-WP-0004-T01
status: done
priority: high
state_hub_task_id: "b0d25083-6495-467e-8d36-5a1f152f4210"
```

Provide a durable runtime store, container image, and persistence tests.

Done 2026-08-09: SQLite-backed persistence on a 1 Gi RWO PVC, immutable image,
and restart-survival verification are complete.

## Production deployment

```task
id: TEN-WP-0004-T02
status: done
priority: high
state_hub_task_id: "eec08b3f-1028-45ab-8e04-457388a9384b"
```

Deploy flex-auth and tenant-engine with least-privilege networking and storage.

Done 2026-08-09: both services are Ready with namespace-scoped ingress/egress;
the live flex-auth-authorized create returned 201.

## Portal integration and live verification

```task
id: TEN-WP-0004-T03
status: done
priority: high
state_hub_task_id: "36cfe954-05e4-4978-afa1-792e1237427a"
```

Align user-engine's adapter with the authority contract and prove tenant creation.

Done 2026-08-09: the deployed portal adapter created
`tenant:trial:portalcheck`; tenant-engine resolved it after a pod restart.