Organizations and members

An organization is the ownership and billing boundary. Server routes revalidate membership and the active organization instead of trusting a browser-provided tenant id.

Role	Members	Billing	Ownership
Owner	Manage all	Manage	Transfer
Admin	Non-owner members	Manage	No
Member	No	View	No

The last owner cannot be removed. Membership and role changes belong in the immutable audit trail.