rls-validator

Row Level Security validation automates checks across your Supabase tables to confirm RLS is enabled, policies are correctly configured, and tenant isolation is enforced. Run /audit --rls to verify RLS setup across target tables like bids, profiles, and organizations, then review the standardized validation report for any gaps.

Tenant isolation prevents one customer's data from being accessed by another through misconfigured RLS policies. Validation confirms that tenant_id in your tables aligns with auth.jwt claims and that role-based access controls properly restrict data visibility per tenant, preventing data leakage.

Yes. RLS validation runs automatically during migrations and policy updates to verify tenant isolation, role-based access control, service-role usage, and logging requirements. It produces a standardized report with remediation suggestions so policy changes don't introduce security gaps.

Validation checks RLS enablement status, policy correctness, tenant_id alignment with auth.jwt, admin and service-role constraints, and logging requirements across core tables. It audits whether your multi-tenant database enforces proper isolation and access controls.

The /audit --rls command generates a validation report highlighting missing policies, incorrect tenant checks, improper service-role usage, or disabled RLS on tables. Review remediation suggestions to fix gaps and re-run the audit to confirm changes.