Row-level security per request, which dictated the API
This is one of the more sensitive data sets a consumer app can hold. Rather than a generated API over the database, it runs a real GraphQL server so every resolver carries the caller's own credentials into the database and row-level security applies per request. The isolation is a property of the database rather than of remembering to filter in application code.
