I think I found the issue(s): ByTermUpdateWorkExecutor, DeleteExtWorkExecutor, UpdateExtWorkExecutor do not factor in a tenantId as needed.

I added a tenantId option to NumericFieldUtils.createExactMatchQuery (to conditionally build a BooleanQuery) for numericIds, otherwise when updateDocument was called, I checked the tenantId to see if a call to Utility.deleteWorkByQuery+addDocument was needed (otherwise use updateDocument with idTerm)

I’m not sure what the preferred coding practices / test cases / pull-requests are - if you’d like me to do anything more to help let me know… but otherwise I imagine this info would be enough 🙂