Your First Supabase RLS Policy, Without Exposing Your Whole Database

A 10-minute worked example of Row Level Security in Supabase. What to write on day one, the three mistakes I keep seeing, and how to verify your policy actually does what you think it does.