"""
Shared tenancy constants used across auth, enrollment, org provisioning,
trip gating, and scripts/backfill_org_id.py.

FOUNDING_ORG_ID is the org every pre-tenancy document (nodes, systems,
calls, incidents, alert_rules created before this pass) gets stamped with by
scripts/backfill_org_id.py, and the org the legacy fleet-wide
settings.enrollment_token still resolves to in routers/enrollment.py so an
already-deployed field node doesn't break the day these rules deploy — see
that file's enroll_node() for the fallback path.

NOTE ON MODEL: per the owner's correction mid-build, DRB's access model is
participation-based (you run a node feeding the network, you get access to
the network's data), not per-seat SaaS — org_role is "owner"/"member" with
no tier axis, and organizations.plan_id/seat_limit/node_limit are inert
placeholders (see models.py OrganizationRecord) until a business-strategy
pass defines what, if anything, gates on them. FOUNDING_ORG_ID plays no
special role in that model beyond being the backfill target and the legacy
token's org — it is not a "free tier" or a privileged org in code.
"""

FOUNDING_ORG_ID = "founding"