#deployments

A restored database with no rule for who could use new tables, and a deploy that noticed too late

A production restore came back without the default-privilege rule that lets my app use newly created tables, so the deploy migrated first and failed afterward. Now a read-only catalog check stops it before anything changes and prints the grants for a person to run.