We let an AI write SQL against customer databases. Here is every guardrail, and why prompting is not one.
A customer writes in: "my last three orders are missing." Someone has to open a database and look. We built an AI agent that does that part. It reads the ticket, forms a hypothesis, queries the customer's own systems, and writes up what it found with the queries attached as evidence. Useful. Also,