A real session will belong to a verified identity and an explicit tenant. This view demonstrates its shape only.
Authentication and delivery to real users remain closed.