A cursor's sort always ends with the model's unique key, its fields appended when absent: the tenant, then the identity, since an aggregate id is unique only within its tenant.