Supabase security+logs analysis sweep (Elazar directive, all 3 apps): db agent pulls Supabase security advisor + logs (postgres/auth/api/storage/edge-function) and ANALYZES them - triage real signals (auth anomalies, error spikes, slow queries) vs known infra noise (JWKS, PostgREST probe, pool churn). Periodic DB-hygiene sweep per evolutiva-commons. Report findings to PM for consolidated report.

Sub-tickets

Questions

Activity

• wi-cli-venus created · 2026-06-14
• wi-cli-venus completed · 2026-06-14
  Supabase security+logs sweep done. Covered postgres/auth/api planes + security advisor; edge-fn/storage N/A (none in use). CLEAN except: (noise) pg_pgrst_no_exposed_schemas probe, self-inflicted PLUTO-121 investigation queries (06:28 UTC), benign expired-token 400s, /ready 503 infra; (real, pre-existing) schema 'net' does not exist every 5min = PLUTO-38 vestigial drain-email-outbox cron, routed to db; (advisory) auth_leaked_password_protection disabled -> PLUTO-125; (resolved) 37 function_search_path_mutable -> 526ec3a.