How are you giving AI agents access to postgress?

I mean we can either let llm generate sql but that's risky right or should we do defined operations?

I mean for both reads and write.

But whether it's llm generate or we define we have to do the manual work of writing determistic guards right...