Postgres
Postgres Default Privileges: How ALTER DEFAULT PRIVILEGES Solves the Forgotten-Grant Problem
GRANT applies to objects that exist now. ALTER DEFAULT PRIVILEGES applies to objects created in the future. The distinction explains why role permissions work for two weeks and then quietly break the day someone runs a migration.