Eight companies, eight realms, one fractional CTO

You're the CTO for eight startups at once. Each one is nervous that you'll paste their database into another client's repo by accident. That fear is reasonable.

Each client's containers live in their own Hoody realm. Each realm issues its own auth tokens, and a token scoped to one realm can't list, read, or touch anything in another. Monday is client A's realm token; Tuesday is client B's. The API won't let Monday's token see Tuesday's containers even if you try.

When the engagement with client C ends, you delete the realm token. Nothing about clients A through H changes. There's no shared VPN, no shared bastion, no laptop full of eight sets of SSH keys.

A realm is a wall between clients that the API enforces, not a wall you promise in a contract.