2aa39d7a11
Verify approve/revoke/manual-bind delete the right tenant-scoped keys via a recording cache double, so the prompt cache stays consistent with the KOL subscription state changes shipped in the previous commit. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>