Agent tooling often ships a “safe preview”: run in a clone, show row counts, roll back a local transaction. That is taste. SQLGuard Instant Cert is the same idea — look, do not authorize.
Production execute needs a separate, fail-closed step: a receipt that matches the SQL you will actually run, verified at the boundary.
Probe and dry-run stay free or cheap on purpose. Confusing them with authorize is how teams
ship confident mistakes.
If this is your write path
Tip: Why Probe is free. Permission: Challenge.