Did the AI tools ever fail to enable RLS?

No. All 12 runs included enable row level security on the tables, and only the public key appeared in browser code, never the secret key.

What separated the two prompting approaches?

Prompt A did not state who may read memos, and all 6 runs produced shared-read setups; prompt B added that logged-in users should see only their own memos, and all 6 runs restricted reads to the author.

Was any of this tested against a real database?

No. The SQL and code were read and judged from the generated output, not applied to a live Supabase project, so the comparison is about whether the design allowed outside reads.

AI Coding AssistantsAI Safety & AlignmentZenn AI/ML4m agoNov 4, 2026, 19:01 JST

Claude Code and Codex turn on RLS every time, but shared reads in 6 of 12 runs

Send on LINE

3 Key Points

What happened
BPR Prot. had Claude Code and Codex build the same Supabase memo app 12 times; every run enabled RLS and used only the public key, but the 6 runs without a stated read scope all became shared-read setups, and 1 Codex run used using (true) with no TO clause, readable even without login.
Why it matters
The RLS switch alone did not separate the runs; leaving the read scope unstated let the AI choose shared visibility, turning every registered user into a potential reader of every memo.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, every morning.

Get these free every morning

FAQ

Did the AI tools ever fail to enable RLS?: No. All 12 runs included enable row level security on the tables, and only the public key appeared in browser code, never the secret key.
What separated the two prompting approaches?: Prompt A did not state who may read memos, and all 6 runs produced shared-read setups; prompt B added that logged-in users should see only their own memos, and all 6 runs restricted reads to the author.
Was any of this tested against a real database?: No. The SQL and code were read and judged from the generated output, not applied to a live Supabase project, so the comparison is about whether the design allowed outside reads.

Zenn AI/MLRead Original Article

Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Get it free

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.