A Read-Only SQL Diagnostic Agent Needs an Enforced Boundary
A diagnostic agent’s read-only claim is tested through actual SQL permission denials, fixed query templates and evidence-based hypothesis rejection.
THE READING ROOM
THE READING ROOM
A diagnostic agent’s read-only claim is tested through actual SQL permission denials, fixed query templates and evidence-based hypothesis rejection.
A real framework tool reaches SQL Server, where two Index Seek plans return the same answer while reading different amounts of data.
Typed intent separates language proposals from executable SQL, trusted tenant scope and independently checked aggregate results.