We built an eval for our Row Level Security guide, found agents were granted risky default database access, and fixed the docs until the eval passed.