Unverified50% confidenceFactExact time
When invoking a stored query, the caller can only execute the SQL that has been explicitly written and cannot splice arbitrary statements, so it is suitable as a controlled interface for apps to read data.
1
Sources
50%
Confidence
Long-term
Relevance
11/4/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedStored queries are a predefined, reusable SQL query mechanism in Datasette.79% similarUnverifiedExecuting PRAGMA query_only = ON; on a SQLite connection sets the entire connection to read-only mode, and any write operation will be rejected by the database engine.75% similarVerifiedSQL is a classic example of a declarative language, where users declare what data they want and the database query optimizer decides the optimal execution plan on its own.75% similarVerifiedSQL injection can fundamentally isolate data from instructions through parameterized queries, whereas there is currently no equivalent "parameterized" solution for the LLM inference process.74% similarUnverifiedPermissions must be enforced at the database and tool level, not written into prompts, because prompts can be bypassed, while database rules cannot.73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1136705API
curl https://kongchang.com/api/v1/knowledge/claims/1136705MCP
get_claim(id=1136705)