Security Architecture & Threat Model

Security Overview

SoulNest implements defense-in-depth: strict server-side authorization, cryptographic session signing, PostgreSQL Row Level Security (RLS), and isolated real-time channel topics.

Database Row-Level Security (RLS)

Every database query enforces PostgreSQL tenant isolation. PostgreSQL functions verify active couple membership at the engine level, preventing cross-tenant leakage.

HMAC Signed Session Tokens

Session state uses cryptographically signed, HTTP-only, SameSite=Lax cookies with minimal claims. Tokens cannot be forged or tampered with on the client.

Deterministic Authorization

Authorization derives strictly from authenticated server identity: Auth User → User Record → Couple Membership. Client-supplied IDs are never trusted as authority.

Scoring & Audit Integrity

Server actions and APIs validate all inputs with strict schemas. Realtime WebSockets are scoped exclusively to authenticated couple channels.

Last updated: September 2026 · SoulNest Platform