Token Service Isolation: Containing Customer Support Chat Reconnect and Backfill Failures

Short answer: isolate token issuance from the chat data path, scope each token to one tenant, conversation, actor, and capability, then make reconnect depend on a durable cursor rather than on whatever the token service remembers. For a property-management support desk, that rule separates two questions that are easy to muddle: “May this leasing...