Observed

The deployment product exists (LangGraph Platform GA 2025-05-16, renamed LangSmith Deployment October 2025, per-deployment-minute pricing), but multi-tenant checkpoint isolation is not enforced at the framework level — thread IDs must be scoped by application code, and a 2026 practitioner report documents a workflow for one customer reading another customer's checkpointed state through a misconfigured thread ID. Auth is a pair of middleware decorator hooks with no native OAuth2/OIDC; external provider integration is required.

1. UPDATE 2026-07-17: re-checked the auth docs — the framework still exposes @auth.authenticate/@auth.on as developer-implemented middleware hooks with no automatic tenant/thread scoping; no framework-level checkpoint isolation has shipped.