is label the "primitive" to use for achieving some sort of tenancy isolation?

Where are you seeing this? I’m not familiar

Just my interpretation. Because agents query cloud using labels.

Oh man I understand now. I thought the word

primitive

was special. Not tenant isolation. More like hardware or execution environment isolation, but yes can be dev/stating/prod. We actually sell more tenants

got it. I think by tenant I meant in this context like "customers". Like I'm a productivity tool startup that has 3 customers google, fb and apple and I use prefect for my data pipeline. In this case, I might use one label for each of apple, google and fb.

if you want to separate compute, but separation of flows can be done in projects