September 2026 Summaries

Supabase is available as a prebuilt connector for Google Cloud Gemini Enterprise, allowing teams to query and interact with Supabase projects through natural-language prompts alongside tools such as GitHub, Linear, Notion, Slack, and Salesforce. The connector retrieves live information directly from a connected Supabase organization without storing or indexing its data, and Gemini Enterprise can combine Supabase results with information from other connected services in a single response. It can help developers access backend details without changing tools while enabling IT and operations teams to review database metrics or table structures without direct Dashboard access. The connector is available across all Gemini Enterprise editions, with Business users connecting through the connector menu and Standard, Plus, and Frontline administrators using a client ID and secret; connections operate at the organization level, and exposed actions are labeled as read-only or destructive.

Supabase is evaluating whether its documentation enables AI coding agents, as well as human users, to complete tasks correctly, beginning with its high-traffic Row Level Security guide, where many readers reported difficulties and errors can expose application data. Using its open-source supabase/evals framework, the team created an independent checklist based on security expertise and external sources, then tasked an agent with configuring access rules for private shared to-do lists and a public weather dashboard without explicitly mentioning RLS. Early tests showed agents granting anonymous users broad write permissions because the guide lacked sufficiently explicit procedural instructions, prompting additions to revoke default grants and deliberately restore access through policies. Although new testing guidance initially failed to improve outcomes, moving test examples directly beside relevant policy code succeeded, illustrating that agents often read documentation selectively rather than sequentially. The project concludes that clear structure, local placement of critical instructions, explicit signposting, and ongoing independent regression testing improve documentation for both agents and people, and Supabase plans to extend these evaluations across more popular guides and publish the RLS scenario as part of its public benchmark.