Who am I, in which tenant, as what

tenant.connector is the firm's practice system as every role may read it: its kind and its narrative_max_chars (and note_max_chars, the internal note's ceiling, null where it declares none, and supplies_languages, whether the system supplies each matter's narrative language), or null where the firm has none, whatever the connector's status. It is what a client words the connector's release blockers and refusals with (connector.*, among them connector.not_connected for a connector in any status but connected); the connector itself is billing's and admin's (GET /v1/connector). tenant.settings is the firm's own settings, which every role reads and an admin writes (PATCH /v1/tenant/settings). tenant.administrators is the display names of the firm's active administrators, in name order, so a page can say who sets the firm's settings. member.system_link is who the caller is in the practice system, or null. judgment_pipeline is jev where the service holds a Jev key and standard where it does not: it is kept for installed desktops that still read it (COMPAT(#180)). legalsense_connector and calendar_offered are always true: LegalSense and the calendar are offered to everyone, and the fields stay for installed desktops that read them. swallow_short_pauses is whether a short pause in the capture is part of the activity block before it (true) or away (false): the swallow-short-pauses flag, true where the flag is on and where this service holds no PostHog key, and LEFT OUT where the flag store gave no answer (it could not be reached, or it does not know the flag), so a device keeps what it had; a device that was never answered swallows. timesheet_pet is whether the firm is offered the timesheet pet: the timesheet-pet flag, false wherever it is off or cannot be read. pipeline_shadow is always false: the cloud pipeline's shadow is deleted (the generate-reliability plan, W6), and the field stays until the follow-up removes it, because a response field is never removed.