Audit report · example
Ref. A-0427 · Next.js + Supabase
- Row-level security off on invoices Critical
- Service key in git history High
- Admin route without auth check High
- No rate limit on login Medium
Fix plan ranked by risk. Scope agreed before work starts.