ENG14 figure review

The trusted fixture creates the database, while tool sessions switch to AgentReader before queries.
ENG14-v1
The restricted principal can read the diagnostic view but cannot update, drop or read unauthorized rows.
ENG14-v2
Application validation refuses unsafe proposals while database permissions deny fixed forbidden operations.
ENG14-v3
The saved actual plan contradicts a proposed full-table-scan explanation.
ENG14-v4
Two approved reads require different source-row and cached-page accesses despite the same aggregate.
ENG14-v5

Motion

Conceptual tool transition