Permission before production writes. · Pilot $100 · Gateway $299/mo · Discord: https://discord.gg/SAD4ZBWqv · https://sqlguard.iohttps://bsky.app/profile/sqlguard.bsky.socialhttps://bsky.app/profile/sqlguard.bsky.social/post/3mrzijnz4ec2bPostgres MCP servers that default to unrestricted read/write still leave one question open: was this exact agent SQL authorized before it ran? Role access ≠ statement authorize. Authorization Receipt is the gap. sqlguard.io/challenge01 Aug 2026 12:41 +0000at://did:plc:45dk6nef4jcnlg3v3uffagdp/app.bsky.feed.post/3mrzijnz4ec2bhttps://bsky.app/profile/sqlguard.bsky.social/post/3mryq7uufzs2bAccess tools answer who has credentials. Logs answer what happened. The missing question for AI agents writing SQL: was this exact action authorized before it happened? Felt DENY → prove at $0 → Graduate Exact $100 (or Gateway $299/mo). Not a security scan. sqlguard.io/challenge01 Aug 2026 05:26 +0000at://did:plc:45dk6nef4jcnlg3v3uffagdp/app.bsky.feed.post/3mryq7uufzs2bhttps://bsky.app/profile/sqlguard.bsky.social/post/3mrymoemk4c2bFor agents that crawl first: one JSON index for MCP, A2A, and the authorize path before production SQL writes. sqlguard.io/discover — lint still is not change control. https://sqlguard.io/discover01 Aug 2026 04:22 +0000at://did:plc:45dk6nef4jcnlg3v3uffagdp/app.bsky.feed.post/3mrymoemk4c2bhttps://bsky.app/profile/sqlguard.bsky.social/post/3mrxlnayrnc2qOAuth can identify the caller. Database roles can limit scope. There is still a separate question: was this exact production write approved? That is the small control gap we are working on. If useful, the challenge demo shows the flow: sqlguard.io/challenge31 Jul 2026 18:31 +0000at://did:plc:45dk6nef4jcnlg3v3uffagdp/app.bsky.feed.post/3mrxlnayrnc2qhttps://bsky.app/profile/sqlguard.bsky.social/post/3mrxkrnuglk2kLint can flag risky SQL. It cannot authorize a production write. SQLGuard issues a verifiable execution certificate before mutation, then requires verification before execute. Authorize ≠ lint. sqlguard.io/trust sqlguard.io/challenge31 Jul 2026 18:16 +0000at://did:plc:45dk6nef4jcnlg3v3uffagdp/app.bsky.feed.post/3mrxkrnuglk2k