{"product":"SQLGuard","title":"AI Production Risk Report","category":"AI Action Authorization","beachhead":"SQL mutating writes (v1)","free":true,"authorize":false,"score":100,"band":"low","thesis":"The problem is not only AI mistakes — it is missing proof of what the AI was allowed to do.","findings":[{"id":"low_surface","severity":"ok","claim":"No write tools / non-prod declared. Re-score when agents gain mutate capability."}],"layers":{"identity":"OAuth / MCP — who may call the tool","roles":"DB roles / RLS — which tables a role can touch","authorize":"SQLGuard Ed25519 PASS — which exact SQL may run (this report checks for it)"},"protect":{"standard":{"sku":"workday_pack","price_usd":"$2.50","slots":100,"ttl":"24h","url":"https://sqlguard.io/v1/workday","mcp":"sqlguard_workday"},"burst":{"sku":"session_cert","price_usd":"$0.25","url":"https://sqlguard.io/v1/session"},"policy":"https://sqlguard.io/require","cite":"https://sqlguard.io/ai-sql-authorization","integrate":"https://sqlguard.io/INTEGRATE.md"},"next":"Keep PASS+verify on every mutate. Re-run when adding write tools."}