Complete procedures with a way back.

Build a local-first analytics assistant that discovers only curated PostgreSQL views, asks OpenAI for a structured SELECT proposal, validates a conservative SQL subset, requires a human to approve the exact query, enforces a restricted database role and read-only transaction, limits time and rows, and emits local table or chart JSON.

Build a two-job GitHub Actions workflow where untrusted pull-request tests run without secrets and a trusted base-branch Agent SDK harness reviews only a bounded diff with no tools, no target-code execution, explicit time and cost limits, structured evidence, and a mandatory human decision.