Observed

The deployment product exists (LangGraph Platform GA 2025-05-16, renamed LangSmith Deployment October 2025, per-deployment-minute pricing), but multi-tenant checkpoint isolation is not enforced at the framework level — thread IDs must be scoped by application code, and a 2026 practitioner report documents a workflow for one customer reading another customer's checkpointed state through a misconfigured thread ID. Auth is a pair of middleware decorator hooks with no native OAuth2/OIDC; external provider integration is required.