Access control for AI agents on Rails: gating SQL with Action Policy

The Evil Martians engineering writeup of gating an in-app AI assistant's SQL access through Action Policy, so open-ended analytics still honour application-level permissions.

Authors: Igor Platonov, Backend Engineer, and Travis Turner, Tech Editor Topics: AI, Rails, Open Source, Ruby, LLMs Our Rails AI assistant had read-only SQL access and could still return peer review scores. Learn how we kept open-ended analytics in an in-app AI assistant while making database access honor application permissions. Our internal Rails app has an AI assistant with read-only SQL access to the database. But when asked for active peer review assignments, it returned written feedback...