3 Commits

Author	SHA1	Message	Date
Garry Tan	bca29338cf	fix: verify-rls.sh — match current policy (inserts allowed, fix HTTP code parsing) ... - INSERTs are now expected to succeed (kept for old client compat) - Fix HTTP code parsing bug (401000 concatenation from -sf + write-out) - Accept 200+empty as PASS for SELECT denial (RLS filtering)	2026-03-24 15:03:07 -07:00
Garry Tan	cc60a024eb	fix: pre-landing review fixes — JSONB field order, version filter, RLS verification ... - Dashboard JSON parsing: use per-object grep instead of field-order-dependent regex (JSONB doesn't preserve key order) - Version distribution: filter to skill_run events only (was counting all types) - verify-rls.sh: only 401/403 count as PASS (not empty 200 or 5xx); add Authorization header to test as anon role properly - Remove dead empty loop in community-pulse	2026-03-24 14:34:06 -07:00
Garry Tan	3330b8e68d	test: RLS smoke test + telemetry field name verification ... - verify-rls.sh: 9-check smoke test (5 reads + 3 inserts + 1 update) verifying anon key is fully locked out after migration. - telemetry.test.ts: verifies JSONL uses raw field names (v, ts, sessions) that the edge function expects, not Postgres column names. - README.md: fixes privacy claim to match actual RLS policy.	2026-03-24 14:20:08 -07:00