Synapsor: Adding Review Boundaries to Database Agents

Quantum_CS · reddit · 2026-07-16

The author developed an Apache-2.0 runtime named **Synapsor Runner**, positioned between the MCP client and Postgres/MySQL. It replaces raw SQL tools like `execute_sql` with "reviewed semantic capabilities." The core concept: models can only propose restricted read/write actions, while actual approval and database execution happen outside the model's loop. The system re-verifies tenant scope, target rows, allowed fields, version numbers, idempotency, and affected row counts, logging the receipts. It also supports tiered auto-approvals, two-person approvals, batch restricted writes, and compensation proposals for reversible changes. The author clearly defines its boundaries: it cannot make arbitrary SQL safe, nor can it replace least privilege, restricted views, RLS, or data isolation. It simply tightens the "readable/writable perimeter" to a more auditable level.

Related event: Synapsor Runner Secures AI Database Access(2 posts)→

Original post →

More from coding & agent

coding & agent channel →