Draft on your Mac. Apply when you say so.
Written for engineers preparing schema migration files.
Open the repository that holds your migration files. The agent drafts the SQL as a file you can diff, and every command outside your permission rules waits for you, including one that would reach a database.
The draft is a file with a history. Running it is a separate decision that stops at the gate, and any git command that could lose work stops for an approval card.
bandicot
Free for one person on your Mac, no card. Your model provider bills you directly.