Next.js and Supabase developer needed for code review and ongoing work

I've built a UK financial intelligence platform solo and I need an experienced developer to review it properly before launch, then take on defined pieces of work if it goes well. The stack: Next.js App Router, TypeScript, Supabase (Postgres + Auth + RLS), deployed on Vercel. Substantial codebase, live behind a password gate. What it does: aggregates regulatory announcements and share price data for UK listed companies, with a community layer where investors discuss them. Multiple account types with role-based access: retail users, listed companies claiming a verified profile, research firms and media outlets publishing under their own banner. Third-party market data integration, an approvals console, email alerts. First job: a paid security and data integrity audit. I want a written report on what's actually wrong. Specifically: Row Level Security policies across every table. Coverage, gaps, and anywhere the app trusts a client that it shouldn't Auth boundaries. Multiple roles with different access, and I want to know where they leak Data integrity. Destructive operations, upserts without conflict targets, anywhere a write can silently do the wrong thing Anything that would embarrass me in front of a paying customer I want real findings rather than trivial ones. Then ongoing, if we work well together: Code review on my changes Migrating from one market data provider to another PWA setup Removing legacy test data from production paths Security hardening before public launch You'd suit this if you know Supabase RLS and Postgres properly rather than superficially, you're comfortable reading a large codebase you didn't write, and you'll tell me plainly when something I've built is wrong. Remote, flexible hours. UK or Europe preferred for timezone overlap.