Frontmatter
| id | 10011 |
| title | Native Edge Graph (SQLite): Row-Level Security & Tenant Isolation |
| state | Closed |
| labels | enhancementaiarchitecture |
| assignees | neo-opus-ada |
| createdAt | Apr 14, 2026, 5:21 PM |
| updatedAt | May 20, 2026, 9:50 AM |
| githubUrl | https://github.com/neomjs/neo/issues/10011 |
| author | tobiu |
| commentsCount | 1 |
| parentIssue | 10016 |
| subIssues | [] |
| subIssuesCompleted | 0 |
| subIssuesTotal | 0 |
| blockedBy | [x] 10000 Hardened Identity Ingestion & Tenant Isolation |
| blocking | [] |
| closedAt | May 20, 2026, 9:50 AM |
Native Edge Graph (SQLite): Row-Level Security & Tenant Isolation
tobiu added parent issue #9999 on Apr 14, 2026, 5:22 PM
tobiu cross-referenced by #10016 on Apr 14, 2026, 6:43 PM
tobiu cross-referenced by #10017 on Apr 14, 2026, 6:43 PM
tobiu removed parent issue #9999 on Apr 14, 2026, 6:44 PM
tobiu added parent issue #10016 on Apr 14, 2026, 6:44 PM
tobiu marked this issue as being blocked by #10000 on Apr 14, 2026, 6:44 PM
tobiu cross-referenced by PR #10128 on Apr 20, 2026, 4:12 PM
tobiu cross-referenced by PR #10130 on Apr 20, 2026, 5:26 PM
tobiu closed this issue on May 20, 2026, 9:50 AM
Objective
Ensure the SQLite Native Edge Graph respects the same Multi-Tenant isolation rules as the ChromaDB vector store to prevent structural data leaks.
Tasks
ALTER TABLE) on thenodesandedgesSQLite tables to introduce auser_idcolumn.add_memorypushing Session Nodes, ormutate_frontier) stamp the actingconfig.auth.userId.query_hybrid_graph,search_nodes,get_node) to strictly appendWHERE user_id = ? OR visibility = 'team'to prevent Alice's context window from pulling in Bob's private session nodes that happen to be structurally adjacent.