The data plane
No model touches your data.
Every query is validated to a single read-only statement before it reaches the database. Writes and DDL throw before execution. Connections run under least-privilege logins, scope-gated, tenant-isolated, fully audited.