Ruby gem that implements row-level multi-tenancy on top of Active Record. Injects default scopes so queries are automatically scoped to the current tenant and raises an error if no tenant is set on a tenant-scoped model — so in practice using Active Record (not raw SQL) protects you from the 'forgotten WHERE-clause' leak. Highlighted in Q&A as making the WHERE-clause risk much smaller in practice.