OAuth says who has access. DB roles say which tables. Neither answers: which exact SQL was authorized, by what policy, right now. SQLGuard is the missing layer — a signed Authorization Receipt before every write.
Before: Agent → Database (no paper trail)
After: Agent
↓
SQLGuard — policy check + Ed25519 PASS
↓
Database (signed receipt on every write)
Paste SQL → free POST /v1/gateway/decide → ALLOW / DENY / REQUIRE_APPROVAL. Not authorize until you pay Exact.
Building an AI product that writes to a database? Tell us what it does. Replies from hello@sqlguard.io within a few hours.
Gateway $299/mo invoice (hello@sqlguard.io) · Pilot $100 Exact on Base (7 days, then invoice) · Builder $99 · Company $499 · Production $1,999/mo