07/16/2026
The LLM physically cannot mutate your data, because the database enforces it, not our prompt.
Chion connects with a read-only role you grant: SELECT only, capped at a fixed row limit, RLS honored. The model sees schema metadata, never your rows.
It can't mutate your data because the role it runs as can't, and it can't drain your warehouse because the row cap won't let it. That's the design, not a guardrail you hope holds.