https://shipreadyai.dev/learn/verify/backend-rules

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# Database row rules

Whether the row rules behind the app actually stop one signed in account reading another's rows.

## Why a check from outside cannot see it

A check can see that a table answers the public key. Whether the rule on it is the right rule requires reading the policy, and policies are not published.

## How to check it yourself

1. Sign in as one account and note the id of a record it owns.
2. Sign in as a second account and request the first account's record by id through the API.
3. Repeat for every table that holds customer data, not just the one on the page you remembered.

## What a Launch Review does instead

A reviewer reads the policies, then asks for another account's record by id and confirms the database refuses.