Open-source extensions for graphql-ruby built on its public extension points. The first module is authorization: deny-by-default coverage, scoped lists and connections, IDOR-safe lookups, mutations, interfaces and unions, visibility driven by the policy, and a schema audit for CI.