Identity & access

Row-level security

Requests do not connect as the service role. Each transaction sets the acting identity, so Postgres policies apply — a bug in the API cannot become data loss.

shipped