pgrls verify --format sarif — SARIF v2.1.0 for GitHub Code Scanning

SEC039 — anonymous-role write policy (52nd rule)

cross-tenant recall for integer/bigint tenant keys

pgrls verify cross-tenant: unconditional leak reads "any other tenant"

pgrls verify --emit-repro: treat the PUBLIC pseudo-role case-insensit…

…ively

pgrls verify --mode cross-tenant --emit-repro — runnable cross-tenant…

… leak reproductions

pgrls verify --mode cross-tenant — prove authenticated cross-tenant i…

…solation

pgrls 0.21.0 — pgrls verify --emit-repro (runnable leak reproduction)

pgrls 0.20.0 — pgrls verify (Z3 tenant-isolation proof + counterexample)

pgrls 0.19.0 — pgrls matrix (effective role × table × command access)