Returns the tenant's TSA usage policy. With includeInherited=true (default) the EFFECTIVE policy is resolved under the deployment ceiling/floor (deployment DISABLED/REQUIRED pins it; deployment OPTIONAL yields REQUIRED iff the tenant selected REQUIRED, else DISABLED). With includeInherited=false only the tenant's own remembered selection is returned (or DISABLED when none is assigned), ignoring the deployment default.

tenantSelectable reports whether the DEPLOYMENT mode is OPTIONAL, i.e. whether this tenant is the one who decides. It is carried on both views because the effective mode collapses OPTIONAL away by design: a tenant that MAY choose and has not chosen yet reads DISABLED / DEPLOYMENT_LOCKED, which is byte-identical to a tenant whose deployment forbids stamping outright. Without this flag the two are indistinguishable from the tenant plane, and the per-tenant TSA surface stays hidden in exactly the case it exists for. The deployment endpoint that carries the raw mode is platform-plane and answers 403 to a tenant caller, by plane rather than by scope, so it is not an alternative.