How Far Data Agent Governance Must Extend
A control chain for identity, retrieval, tools, sandboxes, output, actions, prompt injection, excessive agency, approvals, audit, and incident response.
Knowledge path
Least Privilege
Why Agent-Generated SQL Must Not Run Directly
A controlled execution gateway for validating, authorizing, limiting, sandboxing, verifying, and auditing SQL, code, and external tool calls.