# SQLGuard Pilot

The SQLGuard Pilot is a fixed, seven-day proof that an AI agent's production write path can require a signed authorization receipt before it runs.

**Price:** $100 Exact USDC on Base, or request an invoice at hello@sqlguard.io.

## What you prove

1. Your agent sends one representative `INSERT`, `UPDATE`, `DELETE`, or DDL statement to SQLGuard.
2. SQLGuard returns an ALLOW, DENY, or REQUIRE_APPROVAL decision under the live policy.
3. A paid Pilot issues a signed Ed25519 receipt bound to the exact SQL and schema hash.
4. Your runtime verifies the receipt before it performs its own production write.

SQLGuard does not receive your production database credentials and the public executor remains disabled. Your system remains responsible for executing its own approved write.

## Who it is for

- An AI product that changes customer or operational data.
- A database or MCP tool with a write-capable path.
- A team that needs a clear answer to: “was this exact action authorized before it happened?”

## Start

- **See the gate first:** [run the Challenge](https://sqlguard.io/challenge) and create a harmless synthetic DENY.
- **Agent path:** `POST /v1/challenge` → `POST /v1/challenge/unlock` with Exact amount `100000000` → issue receipt → `POST /v1/verify`.
- **Company path:** [request a Gateway invoice](mailto:hello@sqlguard.io?subject=SQLGuard%20Pilot%20%24100&body=Company%3A%0AWhat%20does%20your%20AI%20write%20to%3F%0A) or review [Gateway](https://sqlguard.io/gateway) for a standing $299/month control.

## Success criterion

At the end of the Pilot, your write path can block a statement without a valid receipt and prove the receipt is bound to the intended statement. If that is not valuable for your product, do not convert it to Gateway.

Technical details: [GATEWAY.md](https://sqlguard.io/GATEWAY.md) · [integration guide](https://sqlguard.io/INTEGRATE.md) · [public verification key](https://sqlguard.io/v1/pubkey).