
Multi-tenant context propagation: the isolation bug you’ll still ship after Postgres RLS
Postgres RLS can stop whole classes of cross-tenant SQL mistakes, but most real multi-tenant leaks now happen outside the request thread: pools, jobs, async boundaries and shared caches. This is a practical blueprint for propagating tenant context safely, with concrete failure modes and tests.
Read more →