import pytest
from kab_ingestion.governance import GovernedPublisher
class Store:
 def upsert(self,d): self.docs=d
 def delete(self,*a): pass
def test_tenant_isolation():
 class D: tenant_id='other'
 class B: tenant_id='acme'; documents=[D()]
 with pytest.raises(PermissionError): GovernedPublisher(Store(),[]).publish(B())