#rls

What row level security actually protects

RLS is the API for Blogen. This note covers public reads, author-only writes, why admin checks belong in profiles, and the UPDATE-needs-SELECT trap that looks like a failed save.