---
id: ADR-PFM-INT-019
title: Workspace records are separated by the database; registries are global
product_area: platform
module: integrations
revision: 1
status: proposed
design_intent: confirmed
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
decision: >-
  Apply the approved database isolation standard to workspace-scoped records and explicitly exempt global
  catalogues and registries. Cross-workspace staff and intake work uses narrowly scoped privileged paths.
constrains:
  - DOM-PFM-INT-001
  - DOM-PFM-INT-002
  - DOM-PFM-INT-003
  - DOM-PFM-INT-004
  - DOM-PFM-INT-005
  - DOM-PFM-INT-006
  - SVC-PFM-INT-integrations
  - SVC-PFM-INT-extensions
  - SVC-PFM-INT-workflow-actions
alternatives:
  - option: Depend only on application workspace filters.
    why_not: A missed filter could expose another organization’s records.
consequences:
  - Ordinary workspace requests must not retrieve records owned by another workspace.
  - Global retirement counts and token lookup need bounded privileged functions.
  - Cross-workspace binding orphaning is confined to the registration transaction.
origin: docs/row-level-security.md (Platform standard)
supersedes: []
---

# Workspace records are separated by the database; registries are global

## Context

The standard establishes the required policy. This examination does not prove every deployed policy or database grant beyond the scoped declarations.

## Decision

Apply the approved database isolation standard to workspace-scoped records and explicitly exempt global catalogues and registries. Cross-workspace staff and intake work uses narrowly scoped privileged paths.

## Alternatives Considered

Depend only on application workspace filters. A missed filter could expose another organization’s records.

## Consequences

Ordinary workspace requests must not retrieve records owned by another workspace.

Global retirement counts and token lookup need bounded privileged functions.

Cross-workspace binding orphaning is confined to the registration transaction.