Four-layer tenant isolation (incl. PostgreSQL RLS)
CAP-tenant-isolation-rls · owner: gotcha-20
EF Core query filter + per-request tenant-scoped session variable + database-command verification interceptor + PostgreSQL Row-Level Security policies on every tenant-scoped table. Migration 20260426220000_AddPostgresRlsPolicies. See gotcha §20 for the four-layer defense + IPlatformAdminQueryScope break-glass pattern.
Evidence
- gotcha-section: docs/engineering/gotchas.md#20 — Four-layer tenant isolation including PostgreSQL Row-Level Security with FORCE ROW LEVEL SECURITY + 104 entities scanned by guard_rls_policies.py