The linter

namespace acme;
database shop;

table public_profile {
  schemafull;
  field name: string;
  permissions: full;
};

SDL-L0001 (spec/table.md)

  ! table `public_profile` in database `acme/shop`: permissions are `full` — anyone, even unauthenticated users, can access every record
   ,-[4:1]
 3 |     
 4 | ,-> table public_profile {
 5 | |     schemafull;
 6 | |     field name: string;
 7 | |     permissions: full;
 8 | |-> };
   : `---- `permissions: full` on this table
   `----
  help: `full` grants everyone — including unauthenticated connections — access to every record; omit the clause for the secure default (implicit `none`), or scope operations in a `permissions`
        block

namespace acme;
database shop;

user admin {
  on: root;
  password: 'change-me-immediately';
  roles: owner;
};

SDL-L0002 (spec/user.md)

  ! user `admin` in the root scope carries a plaintext `password:` — the literal rides in the file and in any emitted DDL
   ,-[4:1]
 3 |     
 4 | ,-> user admin {
 5 | |     on: root;
 6 | |     password: 'change-me-immediately';
 7 | |     roles: owner;
 8 | |-> };
   : `---- plaintext `password:`
   `----
  help: prefer `passhash:` with a pre-computed argon2 hash, or inject the secret at apply time

namespace acme;
database shop;

analyzer fuzzy {
  filters: ngram(5, 2);
};

SDL-L0004 (spec/analyzer.md)

  ! analyzer `fuzzy`: `ngram(5, 2)` has min > max — SurrealDB accepts it and silently degrades
   ,-[4:1]
 3 |     
 4 | ,-> analyzer fuzzy {
 5 | |     filters: ngram(5, 2);
 6 | |-> };
   : `---- `min` exceeds `max`
   `----
  help: swap the bounds so min ≤ max — SurrealQL accepts any pair and silently degrades

namespace acme;
database shop;

table user;
table post;

table user->wrote->post;

SDL-L0006 (spec/table.md)

  ! relation `wrote` in database `acme/shop` is not `enforced;` — RELATE accepts endpoints that do not exist
   ,-[7:1]
 6 | 
 7 | table user->wrote->post;
   : ^^^^^^^^^^^^|^^^^^^^^^^^
   :             `-- not `enforced;`
   `----
  help: add `enforced;` to make SurrealDB verify both endpoints at write time

namespace acme;
database shop;

table audit {
  permissions {
    delete: full;
  };
};

SDL-L0014 (spec/table.md)

  ! table `audit` in database `acme/shop` carries `delete: full;` — INFO elides `FOR delete FULL`, so the clause cannot round-trip or drift
   ,-[4:1]
 3 |     
 4 | ,-> table audit {
 5 | |     permissions {
 6 | |       delete: full;
 7 | |     };
 8 | |-> };
   : `---- `delete: full;` cannot round-trip
   `----
  help: the clause still applies on execution; INFO elides `FOR delete FULL`, so the differ converges silently — verify the database's actual delete permission if it matters

namespace acme;
database shop;

table org {
  field name: string;
};

table page {
  permissions {
    select: (SELECT * FROM orgs WHERE org = $auth.org);
  };
};

SDL-L0024 (spec/README.md#the-linter)

  ! table `orgs` is referenced in this table permission in `page` in database `acme/shop` but no linted file defines it
    ,-[8:1]
  7 |     
  8 | ,-> table page {
  9 | |     permissions {
 10 | |       select: (SELECT * FROM orgs WHERE org = $auth.org);
 11 | |     };
 12 | |-> };
    : `---- `orgs` is not defined
    `----
  help: define the target, check the spelling, or excuse the statement with `// surform-lint-allow: SDL-L0024` — a target outside the linted files is legitimate (SurrealDB's catalog is flat)

namespace acme;
database shop;

// A public reference table: world-readable by design.
// surform-lint-allow: SDL-L0001
table countries {
  field code: string;
  field name: string;
  permissions: full;
};

namespace acme;
database shop;

// surform-lint-allow: SDL-L0001
table settings {
  field key: string;
};

table orders {
  field id: int;
  permissions: full;
};

SDL-L0001 (spec/table.md)

  ! table `orders` in database `acme/shop`: permissions are `full` — anyone, even unauthenticated users, can access every record
    ,-[9:1]
  8 |     
  9 | ,-> table orders {
 10 | |     field id: int;
 11 | |     permissions: full;
 12 | |-> };
    : `---- `permissions: full` on this table
    `----
  help: `full` grants everyone — including unauthenticated connections — access to every record; omit the clause for the secure default (implicit `none`), or scope operations in a `permissions`
        block

namespace acme;
database shop;

table person {
  field name: string;
};

field nickname: string { on: person; }; // surform-lint-allow: SDL-L0007

namespace acme;
database shop;

// surform-lint-allow: SDL-L0099
table countries {
  permissions: full;
};

SDL-L0023 (spec/README.md#the-linter)

  ! this allow comment names unknown lint code `SDL-L0099` — not in the registry (SDL-L0001 through SDL-L0026), so it suppresses nothing
   ,-[4:3]
 3 | 
 4 | // surform-lint-allow: SDL-L0099
   :   ^^^^^^^^^^^^^^^|^^^^^^^^^^^^^^
   :                  `-- unknown lint code
 5 | table countries {
   `----
  help: spell a registered code exactly, comma-separating several — the registry is SDL-L0001 through SDL-L0026

SDL-L0001 (spec/table.md)

  ! table `countries` in database `acme/shop`: permissions are `full` — anyone, even unauthenticated users, can access every record
   ,-[5:1]
 4 |     // surform-lint-allow: SDL-L0099
 5 | ,-> table countries {
 6 | |     permissions: full;
 7 | |-> };
   : `---- `permissions: full` on this table
   `----
  help: `full` grants everyone — including unauthenticated connections — access to every record; omit the clause for the secure default (implicit `none`), or scope operations in a `permissions`
        block