I'm about to launch an app I built with an AI coding tool. I want to check who can see and change what: the access rules around my data, who can read a record, who can write one, and which routes skip the check.

For every table and every route: who can read it, who can write it, and what check stops a stranger? Show me the path a logged-out visitor would take to read another user's data.

A good answer is table by table: the rule that guards it, and the ones with no rule named, for example "the orders table has no row-level security, so any visitor can list every order", with the rule to add, written so your AI can apply it.