EP 2 · 23 June 2026
Supabase RLS without tears: the policy pattern that actually scales
Row Level Security is the best reason to use Supabase and the fastest way to lock yourself out of your own database. Most tutorials hand you a policy that works for one table and falls apart the moment you add a team.
Here's the multi-tenant pattern we ship in production: one helper function, policies that read like English, and a test you can run before you trust it. No client-side auth checks pretending to be security.
More from Velocity Labs
Astro 5 Server Islands: static where it counts, dynamic where it matters
Astro 5 quietly shipped one of the best ideas in front-end this year: server islands. You keep the whole page static and CDN-cached, then punch out the one bit that needs to be live — cart count, auth state, prices — and stream it in after.
24 June 2026Tailwind 4's Oxide engine: 10x builds and the migration nobody mentions
Tailwind 4 threw out the JavaScript config and rebuilt the engine in Rust. Builds got stupid fast and the whole thing now lives in your CSS with @theme. The internet collectively lost its mind — mostly in a good way.
22 June 2026React 19's use() hook: the end of useEffect data fetching
React 19 shipped use() — read a promise or context right in render, with Suspense doing the waiting. The useEffect-fetch-setState dance that's haunted every React codebase since 2019 finally has an exit.
21 June 2026