BSG/S1
The database decides.
Permissions live in the database as rules, not scattered through application code. A bug in a route can make a request fail; it can’t let a stranger change your data.
Serves: Trust is the product.
Ocheso
RECORD21 Oct 2026Every request to Ocheso’s API runs as the person who made it, and the database’s row-level rules answer. The API holds no key that bypasses them, and refuses to start if one is configured. 87 checks, run as each role, prove the rules.
Our second company
RECORD10 Aug 2026Every table in our second company’s database has row-level security on and no public access, and new tables get the same automatically.