Questions clinic owners actually ask

Every clinical and billing table is keyed by clinic. Requests run inside a tenant context built from a verified session, not from a header the browser can spoof.