Problem
Enterprise data agents are risky when models can write arbitrary SQL or cite unverified retrieval. Teams need bounded, read-only querying with deterministic verification and audit traces.
Solution
Bounded Data Agent separates model planning from deterministic tools: semantic query, hybrid search, sampling, profile SQL, bounded SQL, verification, evaluations, and audit trace are distinct stages.
Challenges
The system must constrain SQL scope, preserve database safety, verify sampled answers, support vector retrieval, and explain how every answer was produced without exposing uncontrolled database access.
Innovation
The architecture treats the model as planner and explainer while typed tools perform computation. Governance is built into the retrieval and SQL path rather than bolted on after generation.
Domain expertise
This shows Stefan's command of governed RAG, Postgres/pgvector, Drizzle schemas, LangGraph-style flows, SQL safety, verification harnesses, and audit-focused data-agent design.