Since I can't get a hold of you and you need to lock this down ASAP. My suggestion would be to either pull the plug on your @supabase or tell your AI vibe coding agent to do this: 1. Enable RLS on the table: ALTER TABLE agents ENABLE ROW LEVEL SECURITY; 2. Create restrictive policies: -- Public can only see non-sensitive columns via a view CREATE POLICY "anon_read_public_fields" ON agents FOR SELECT TO anon USING (false); -- Block direct table access entirely -- Authenticated users see only their own CREATE POLICY "users_own_data" ON agents FOR SELECT TO authenticated USING (auth.uid() = owner_id);