How I test Postgres row-level security for tenant isolation
A row-level security test suite can pass and still prove nothing. How I built PI6's harness so a green run means a tenant really cannot read another tenant's rows.
Read articleHow I build MCP servers
How I built the multi-tenant MCP server for PI6: what I expose to an agent, the OAuth security around it, and how I dogfood it with an LLM.
Read article