How we built multi-tenant isolation in NestJS that even a junior dev can't break

About a year ago, a junior dev on our team wrote a cleanup job that nuked records without a tenant filter. In staging, We run a multi-tenant NestJS + TypeORM SaaS (shared database, shared schema, tenant_id column on everything). The WHERE tenant_id = ? everywhere." Which works great right up until i