Introducing active_security
ActiveSecurity adds checks around ActiveRecord queries. Models can reject unscoped lookups, require an owning association such as a tenant, and detect query predicates that were not handled. Configure protections per model with active_security, or establish shared defaults with ActiveSecurity.defaults.
Read the upstream README for installation and usage, or browse the project repository.