Blog

Engineering deep dives on database safety, approval workflows, and AI agent governance.

Architecture

Deploying a centralized DB approval system without opening inbound ports to your databases

Most DB management tools require the control plane to connect to databases. That architecture turns network boundary management into the primary adoption cost. dbward's agent model inverts this: credentials and database connectivity stay local, only outbound HTTP(S) leaves.

Jun 28, 2026
Security

AI agents should not have direct production DB credentials

MCP made it easy to connect AI agents to databases. But 'easy to connect' isn't 'safe to connect.' Here's how to build the execution boundary that's missing.

Jun 25, 2026