tenantscope
Tenant-filter check for test suites · in progress
Reads the SQL your test suite actually sends and flags queries on tenant tables that have no tenant filter, with the call site. For app-layer isolation (Drizzle, Kysely, pg), not row-level security.