---
name: sec-rls-01
description: Ensures Row Level Security is enabled on all new tables.
version: "1.0.0"
specialist: Sindre
governance: HARD_LOCK
---

# 🛡️ SEC-RLS-01: Mandatory RLS (The Sindre Protocol)
This is a HARD_LOCK protocol for database integrity.

## 🚫 Forbidden
Never push a migration that creates a table without enabling RLS.

## ✅ Mandated
Every `CREATE TABLE` statement must be followed by:
`ALTER TABLE "public"."your_table" ENABLE ROW LEVEL SECURITY;`

Frank/Sentinel will scan all migration files and block the release if this clause is missing for any table.

---
*Provisioned by Rigstate CLI. Do not modify manually.*