Drizzle ORM

Moving tenant isolation into Postgres policies buys zero rows instead of a cross-tenant leak

Postgres policies do not apply to superusers or table owners, so one Next.js team's isolation pattern turns on which role the app connects as and on a variable set inside each request's transaction.