multi-tenant-model-isolation

Identify and mitigate cross-tenant leakage in shared AI deployments.

4|Updated Apr 27, 2026
One-click install
npx skills add https://github.com/maruakshay/mii-ai-security --skill multi-tenant-model-isolation
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: multi-tenant-model-isolation
Source: https://github.com/maruakshay/mii-ai-security/tree/main/skills/multi-tenant-model-isolation
Command: npx skills add https://github.com/maruakshay/mii-ai-security --skill multi-tenant-model-isolation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Review multi-tenant AI deployments for cross-tenant leakage, LoRA adapter contamination, shared inference worker risks, system prompt bleed, and tenant isolation failures in model serving infrastructure.

Core Features & Use Cases

  • Identify and mitigate cross-tenant data leakage in shared inference environments.
  • Verify per-tenant isolation for KV caches, adapters, and RAG components.
  • Use case: Ensure Tenant A's prompts and documents do not bleed into Tenant B's sessions in a hosted inference service.

Quick Start

Audit your deployment for cross-tenant leakage by validating per-tenant isolation boundaries and flushing shared inference state between tenants.

Frequently Asked Questions about multi-tenant-model-isolation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent cross-tenant data leakage in shared AI inference workers?

To prevent cross-tenant data leakage in shared inference workers, enforce tenant scoping from authenticated credentials and flush KV caches between tenant sessions to clear shared inference state.

What is per-tenant LoRA adapter contamination and how do I isolate it?

Per-tenant LoRA adapter contamination occurs when adapter states bleed across sessions. Mitigate it by verifying per-tenant resource isolation and flushing shared inference state between tenant requests.

How do I enforce tenant isolation in a shared vector store for RAG pipelines?

Enforce tenant isolation in shared vector stores by applying explicit data-layer security measures, utilizing row-level security and per-tenant namespaces to scope RAG pipeline retrievals.

Does multi-tenant model serving require row-level security to stop system prompt bleed?

Yes, multi-tenant model serving requires explicit data-layer security measures like row-level security and per-tenant namespaces to stop system prompt bleed and ensure strict tenant isolation boundaries.

What are the risks of shared KV caches in multi-tenant AI deployments?

Shared KV caches in multi-tenant AI deployments risk cross-tenant data leakage by retaining prompt data between sessions. Mitigate this by enforcing KV cache flushing between tenant requests.