Tagged architecture.

Cross-tenant cooldown: 7 days because we'd want it ourselves

When two of our customers independently find the same lead, the second one to send is silently held for seven days. Thirty days if the lead already replied. Neither customer sees the other. Here's why we built it that way, what it costs each tenant, and why the alternative — both customers firing in the same week — is the failure mode we refuse to ship.