SEV-1: blocks launch

A database policy lets anyone write

What goes wrong

Row level security is on, but this policy says yes to everyone, so a stranger can edit or delete your data.

Replace true with a real condition, such as auth.uid() = user_id, on both the using and with check clauses.

npx sigship

Run it in your project. It reports this check as rls-open-write, along with 16 others. Nothing leaves your machine.