anon-harden: least-privilege anon/authenticated grants + scoped storefront policies - #10

Merged

snackman merged 2 commits into

mainfrom

Jun 5, 2026

Commits on Jun 5, 2026

anon-harden: least-privilege anon/authenticated grants + scoped storefront policies

snackman
and
claude
committed
c806ff1
test(rls): reset jwt claims to '{}' so anon SELECT doesn't hit ''::json

snackman
and
claude
committed
b949777