Source: official Supabase connector/runtime Runtime state: ACTIVE_BOUNDED

Allowed: schema inspection, migrations, edge functions, logs, advisories, controlled SQL, project metadata. Denied: secret disclosure, destructive schema/data changes without approval, privilege escalation, bypassing RLS or auth. Evidence: connector result, migration/function version, SQL rowsAffected, logs/advisories where applicable. Boundary: DATABASE_ACCESS != AUTHORITY; WRITE_CAPABILITY != APPROVAL; ACTIVE_FUNCTION != PRODUCTION_READINESS.