Tenant isolation, enforced by PostgreSQL
Row-level security on every organization table, forced for the application role. A bug in application code cannot reach another company’s data — and a test proves the isolation on every build.
RLS + FORCE on every org table · isolation proof in CI