AgentFlow Enterprise Docs

Supabase Schema and RLS

Historical manual invoice records remain protected by RLS. New public invoice requests are retired.

Manual invoice requests

  • The manual_invoice_requests table has RLS enabled.
  • The public /api/payments/manual-invoice route is retired and returns 410.
  • Anonymous and authenticated browser roles do not receive table access.
  • Trusted server administration can review and update request status.
These docs describe implementation readiness and configuration. They are not a certification, penetration test, contractual SLA, or financial advice claim.