Cursor rule

1---
2description: Supabase data, storage, and RLS rules
3globs:
4  - "supabase/**/*"
5alwaysApply: false
6---
7 
8# Supabase Rules
9 
10- Use Supabase for auth, CRUD, storage, consent records, RLS, and lightweight Edge Functions.
11- Keep heavy ML, OCR, extraction, parsing, and model workflows in `ai-service`.
12- Treat RLS as a primary protection layer.
13- Pair sensitive tables with narrow, auditable policies.
14- Plan affected data flows and access paths before schema or policy changes.
15