August 23, 2026
Secure multi-tenant app build
Claude Code
- Wall-clock time
- 1h 00m
- Agent turns
- 177
- Total tokens
- 14.2M
- Lines of code (ts/tsx)
- 3,469
Built a correct app in half the time and a fifth of the tokens, with tenant isolation written in good discipline in one access layer. But the isolation is a convention, not a mechanism: connection.ts exposes query()/run() with free-form SQL, and one forgotten tenant predicate leaks silently - its own SECURITY.md admits this and points to Fable's design as the fix. We found one real leak on the auditor dashboard, zero tests, and the UI does not update without a manual reload (zero revalidate calls).
View benchmark