Row level security

Row level security is the rule that sits between a table and whoever is asking for its rows. Without it, a table answers anyone holding the browser key, which is published in your app and visible to every visitor. With it, the database checks the signed in account against a condition you wrote before it returns a single row.

AI builders create tables quickly and often leave the rules for later. Later tends to arrive after launch. The two most expensive failures in the incident library, CVE-2025-48757 and the Moltbook exposure, both come down to rows answering a request that should have been refused.

From outside, a check can see whether a table answers the browser key at all. It cannot judge whether each rule is correct. That part is Not verified until a person reads them.

No incident in the library maps to this one yet.