# Authorization middleware placeholders.
# Server-side checks replace Supabase RLS for TrusteeFlow V2.
# Never trust organisation_id, role, or View As state from the client.
