# Supabase access repair

- Adds `supabase/migrations/20260908114025844_antelier_rls.sql` with proposed row-level security changes.

## Findings

Anyone with your public key can read and change every row in bookings.

## Owner decisions

Review existing policies before applying: PostgreSQL permissive policies combine with OR; an existing broad policy may still allow access.
Only rls-off findings receive generated SQL. Other policy and anonymous-access findings need owner review.

## Apply and verify

No database changes have been made. Review the migration, then apply it with `supabase db push` or the Supabase dashboard. Run `antelier journeys run` afterwards to verify the app still works.