TL;DR: app-layer filtering is a single point of failure. Push tenant isolation into Postgres with RLS...
Your WHERE clause is not a security boundary (multi-tenant RAG with pgvector + RLS)
Related
Stop Patching by CVSS. Patch What Attackers Actually Use. 🚀
TL;DR: Global Hack Map is a free, MIT-licensed live map of publicly reported cyberattacks, data...
I gave a colleague a terminal into one Claude Code session
A guest link and sessionhub attach: one session's terminal for someone else, without an SSH account. Plus Rex as a second backend.
Bookmark Managers Are Graveyards: Why I Built a Single-Binary Go + SQLite Action Engine
How I built Sparkkeep: a single-binary Go 1.26 + pure-Go SQLite capture, AI triage, and deterministic research engine that syncs with Obsidian, Notion, and Joplin.