Auth, access, and data boundaries
Sessions that disappear, redirect loops, incorrect authorization, users seeing the wrong data, tenant isolation gaps, and Supabase RLS behavior.
Evidence: Next: PostgreSQL RLS, private and public data boundaries, and transactional commands.