erp-report-engine · the guard runs in your browser, on the exact code the engine ships
Paste any SQL and the real guard — the same assert_read_only() the
tests run — decides allow or refuse, right here, client-side. Nothing is sent anywhere; there is
no server and no database. It's a pure function from a string to a verdict. See if you can sneak a write, a file
read, or an outbound connection past it.
loading the guard (Python + sqlglot, a one-time download)…