Complete procedures with a way back.

Build a local-first analytics assistant that discovers only curated PostgreSQL views, asks OpenAI for a structured SELECT proposal, validates a conservative SQL subset, requires a human to approve the exact query, enforces a restricted database role and read-only transaction, limits time and rows, and emits local table or chart JSON.

Pin Helm and chart inputs, separate secrets from values and release history, render and server-validate manifests, stage upgrades with bounded waits, verify application behavior, roll back only across compatible data, and operate hooks, CRDs, drift, and secret rotation.