See

I end up with this:

See how the session clearly has a tenant ID, but the query SQL doesn’t include a where clause (where tenantName = ‘mainTenant'). Clearly Hibernate ORM didn’t add the filter it’s supposed to add automatically to every relevant query (see org.hibernate.binder.internal.TenantIdBinder, org.hibernate.internal.SessionImpl#setUpMultitenancy).

TBH this looks more like a Hibernate ORM bug or limitation, but we need to investigate to see if:

1. Our tests are incomplete; how could this get past CI?

2. We can work around it by creating our query differently.

3. We can legitimately report it to Hibernate ORM (maybe it’s a known issue or documented limitation).