build1 distinct publisher
The agent asks, the gateway decides: why read-only is not a security boundary
An open-source Go project puts a JWT-checking gateway and a separate query adjudicator between agents and warehouses. The credential never reaches the model, and neither does the tenant argument.
Publishers:dev.to
Reality
- Evidence46
- Adoption
- Insufficient
- Hype gap−8
- Incentives68
- Confidence44