Comment by k-taro56

Nice concept! I’m concerned about that LLM might discover `faz.yaml` and directly access the databases. Wouldn’t it be more deterministic and safer to wrap the database itself and use a safety-pipeline-enabled DB instead?