> ## Documentation Index
> Fetch the complete documentation index at: https://docs.drdj.me/llms.txt
> Use this file to discover all available pages before exploring further.

# Supabase Advisor Review

> Advisor-oriented review checklist and current remediations for Supabase/Postgres health.

## Review Method

* inspect migrations for RLS anti-patterns
* inspect function hardening (`search_path`)
* verify index strategy around common FK and auth lookups

## Current Remediation State

* prior advisor fixes exist in:
  * `migrations/fix-advisors-2025-11-09.sql`
  * `migrations/fix-supabase-advisors.sql`
* current cycle patch:
  * `migrations/fix-supabase-advisors-2026-02-19.sql`
  * `migrations/add-agent-approvals.sql`

## What Was Fixed This Cycle

* converted remaining `auth.uid()` policy patterns to `(SELECT auth.uid())` in newer migrations
* set `search_path` hardening for `update_contact_notes_updated_at()`
* optimized admin menu policies that still used row-by-row `auth.uid()` evaluation
* enabled RLS on `agent_approvals` and added an own-record `SELECT` policy for authenticated users while keeping inserts/updates/deletes backend-managed

## Ongoing Checks

```bash theme={null}
rg -n "auth\.uid\(\)" migrations
rg -n "SET search_path" migrations
```

Use this page with the internal change protocol before any schema/policy modifications.