Inventory security & tenancy review

A security and performance pass over inventory covering four concerns: tenant isolation, cache consistency, the role matrix and a staged enforcement script for row-level security on Neon. It documents how the authenticated context wrapper threads organisation context through the data layer, and how the staged SQL enables enforcement in a controlled order.

• Organisation-scoped getters as the primary isolation mechanism after the RLS removal.
• Cache keys must include the organisation id or a cross-org read becomes possible.
• Pattern-based cache deletion on mutation rather than scattered single-key invalidation.
• Staged enforcement so the policy script can be applied without a window of broken reads.

Design

docs/superpowers/specs/2026-08-01-inventory-security-review-design.md

Plan

docs/superpowers/plans/2026-08-01-inventory-security-review-plan.md