RLS2 — two users get DIFFERENT self-scoped predicate TEXT (deterministic, no DB read).
The SQL-level complement of the RLS3 fingerprint check: prove segregation at the predicate
itself (each marked-up filter embeds its own user's id, and the two texts differ). Needs a
{{UserID}} filter + two distinct users; skips-as-pass when either is unavailable.
RLS2 — two users get DIFFERENT self-scoped predicate TEXT (deterministic, no DB read). The SQL-level complement of the RLS3 fingerprint check: prove segregation at the predicate itself (each marked-up filter embeds its own user's id, and the two texts differ). Needs a
{{UserID}}filter + two distinct users; skips-as-pass when either is unavailable.