Your AI agent is lying about your Stripe webhook (and your Supabase RLS)

AI coding agents are great at making things work. They're much worse at making things safe. After reviewing a pile of Cursor and Claude Code generated Next.js + Supabase + Stripe apps, the same two bu