We let an AI write SQL against customer databases. Here is every guardrail, and why prompting is not one.

A customer writes in: "my last three orders are missing." Someone has to open a database and look. We built an AI agent that does that part. It reads the ticket, forms a hypothesis, queries the custom...