# Requirements Checklist (031) **Created**: 2026-01-04 **Feature**: [spec.md](../spec.md) - [ ] Tenant memberships/roles exist and are enforced. - [ ] Current Tenant context is per-user and always visible. - [ ] Portfolio shows only accessible tenants with environment + health/status. - [ ] “Open tenant” changes context and redirects into tenant-scoped area. - [ ] Tenant-scoped resources are filtered by context and deny unauthorized access. - [ ] Bulk “Sync selected” dispatches per-tenant jobs and is role-gated. - [ ] Restore flows show target tenant + environment and require tenant-aware confirmation. - [ ] Pest tests cover authorization + context switching + bulk actions.