https://shiptested.github.io/2026-07-171.0 https://shiptested.github.io/checklist/2026-07-170.8 https://shiptested.github.io/articles/2026-07-180.7 https://shiptested.github.io/articles/webhook-idempotency/2026-07-170.8 https://shiptested.github.io/articles/supabase-rls-two-user-test/2026-07-170.8 https://shiptested.github.io/articles/success-url-not-proof-of-payment/2026-07-170.8 https://shiptested.github.io/articles/verify-webhook-signature/2026-07-170.8 https://shiptested.github.io/articles/service-role-key-bypasses-rls/2026-07-180.8 https://shiptested.github.io/articles/secrets-in-the-client-bundle/2026-07-180.8 https://shiptested.github.io/articles/supabase-storage-bucket-exposure/2026-07-180.8 https://shiptested.github.io/articles/authenticated-not-authorized/2026-07-180.8 https://shiptested.github.io/articles/revoke-access-on-refund/2026-07-180.8 https://shiptested.github.io/articles/test-mode-not-live-mode/2026-07-180.8 https://shiptested.github.io/articles/client-controlled-price/2026-07-180.8 https://shiptested.github.io/articles/unauthenticated-ai-endpoint/2026-07-180.8