feat(persistence): enforce migration object naming contracts - #521

Draft

seonghobae wants to merge 314 commits into

fix/contradictory-zero-count-recordsfrom

feat/migration-naming-object-coverage

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 16, 2026

test(persistence): limit supplemental RLS allowance to restrictive policy
seonghobae
committed
4f65057
fix(persistence): respect restrictive RLS composition
seonghobae
committed
849fd8f
test(persistence): reject restrictive alias spoofing
seonghobae
committed
7215c51
fix(persistence): bind restrictive mode to policy header
seonghobae
committed
17a72a7
test(persistence): close remaining RLS evidence boundaries
seonghobae
committed
5e1867e
fix(persistence): reject qualified tenant-setting lookalikes
seonghobae
committed
5ccce53
fix(persistence): bind RLS evidence to policy statements
seonghobae
committed
dc4c678
test(persistence): reject RLS header tenant spoof
seonghobae
committed
523a2f7
fix(persistence): exclude RLS headers from tenant evidence
seonghobae
committed
ac299d5
test(persistence): require relational tenant RLS binding
seonghobae
committed
9592d62
fix(persistence): bind tenant RLS identity to session key
seonghobae
committed
8c4aaef

Commits on Sep 17, 2026

Commits on Sep 18, 2026