Enforces GrantForge policies in PostgreSQL with PostgreSQL's own access control: a service beside the servers that keeps one role per user holding exactly what the service's signed policies give the user, down to columns, and one restrictive row security policy per row filter, in step with the policies, the users and the tables of every database, each database changed in one transaction, and undoes changes made to them by hand. It reports accesses from the server ...