Isolation enforcement mechanism

What actually prevents a query from returning another tenant's rows.