Multi-tenant Pinterest publishing fails in predictable ways: one tenant floods the queue, another tenant’s credentials expire, retries go pathological, and you can’t explain what happened to support. This post lays out an architecture that isolates tenants (and accounts), contains failures, tracks usage cleanly, and exposes job state you can actually operate—without turning your Pinterest integration into a permanent on-call burden.