# FLR010-LAB1 — Tenant Isolation Breach Evidence

Implement a bounded `evaluate(case)` function over eight synthetic tenant-isolation cases. Treat server-verified tenant context and each shared boundary independently: API, database, cache, queue/background work, and object storage.

Do not infer safety from one green boundary. Preserve `OPEN_BOUNDARY_UNRESOLVED` when evidence cannot locate the first failed boundary. After containment/repair, evaluate the post-change fields from scratch. The lab is local and defensive; no real tenant, production system, credential, customer data, or external target is involved.