9 min readUpdated September 22, 2026
Row Level Security explained
What Row Level Security is, why it is on by default in hosted databases, how a policy is evaluated, and the mistakes that make tables silently empty or dangerously open.
Security
Keys, secrets, access rules and the mistakes that show up most often in generated code.
7 min readUpdated September 22, 2026
How to keep API keys out of your frontend
A practical method for moving secret-using code to the server, checking what actually shipped to the browser, and proving a key is no longer exposed.
10 min readUpdated September 22, 2026
Common security mistakes in AI-generated apps
The handful of issues that show up repeatedly in generated code — what each one looks like, why it happens, and the check that catches it.
Looking for something else? Browse every topic.