Resources
The production playbooks for safe text-to-SQL: how to enforce read-only SELECT, stop prompt-injection at the validator, trace every query line back to your schema, and export the whole pipeline so it runs in Claude Code, Cursor, or Codex.
Most safe-text-to-SQL guides tell you to hand-roll a least-privilege user and a regex SQL guard. A regex guard misses an obfuscated UPDATE; a 3-layer SELECT-only validator + statement_timeout + LIMIT wrap cannot run one.
How Chion stops prompt injection in a text-to-SQL agent: input sanitized as data, a read-only SQL validator blocking writes, and re-escaped history.