Sublet lets you declare a tenant root and subletters that 'sublet from' a parent association—even chaining through multiple levels. Developers set current_tenant themselves in controllers; Sublet scopes AR queries automatically (including admin filters) without adding tenant_id everywhere.