https://shipreadyai.dev/glossary/row-level-security

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# Row level security

The rule that decides which rows of a table an account may read or change.

Row level security is the rule that sits between a table and whoever is asking for its rows. Without it, a table answers anyone holding the browser key, which is published in your app and visible to every visitor. With it, the database checks the signed in account against a condition you wrote before it returns a single row.

AI builders create tables quickly and often leave the rules for later. Later tends to arrive after launch. The two most expensive failures in the incident library, CVE-2025-48757 and the Moltbook exposure, both come down to rows answering a request that should have been refused.

From outside, a check can see whether a table answers the browser key at all. It cannot judge whether each rule is correct. That part is Not verified until a person reads them.
