RunConfig

The identity and limits of one run. RunConfig() is evaluated per call, so each gets a fresh RunId. The tenant is part of the thread's identity: it is recorded on every checkpoint, and admission refuses a run whose tenantId differs from the latest checkpoint's (GraphError.TenantMismatch; None and Some differ). The principal is recorded on the run's RunStarted, RunRecovered and RunResumed events and is never checked.