Your RLS Policies Are Untested Code

Ask a team how they test their API authorization and you will get a straight answer: middleware tests, integration tests, maybe a security review. Ask the same team how they test their Row Level Secur