A vector query includes tenantId as a shard filter. Is that alone sufficient proof that the caller is authorized for the tenant?

1. Yes; any caller who writes a tenantId automatically owns it
2. Yes; approximate search replaces identity controls
3. No; therefore sharding can never be useful
4. No; the application must independently authenticate and authorize the tenant scope