Fig 1A Where is not a yesHover to scrub · arrows stepGET /api/alt-text/health
Where card: the read rule's row constraintYour tenant's documents (left) and another tenant's (right)The read rule returns a Where, not a boolean. 0.12.0 only asked whether it was !== false, read yes, and dropped the constraint; the cached scan had already counted every tenant with overrideAccess: true, so any logged-in user got counts and up to 100 document IDs from rows they cannot read. 0.13.0 records the constraint and scans as the user.