from .models import Document

def validate_documents(documents,tenant_id):
    errors=[]
    for d in documents:
        if d.tenant_id!=tenant_id or d.acl.tenant_id!=tenant_id: errors.append(d.id+": tenant isolation failure")
        if not d.provenance.source_id or not d.content_hash: errors.append(d.id+": missing provenance/hash")
    return {"passed":not errors,"errors":errors,"count":len(documents)}