Read-only. Scoped. Logged. Private.
A language model connected to a production database needs a connection built to be safe from the start. This is how ours works.
- Read-only access. The database connection the model uses cannot insert, update or delete, no matter what it's asked.
- Permissions enforced. Each query runs as the user who asked, scoped to the records and columns their role already allows. The model is never shown more.
- Audit log. Every question, the generated query, its result and who asked are recorded, so any answer can be traced and reproduced later.
- Your data stays yours. It isn't used to train models and doesn't leave an environment you control. Only the schema and the rows needed for the answer are ever processed.
- Limits and timeouts. Row caps, query time limits and rate limits keep a careless question from becoming a load problem.