The database is where AI agents in production get weird

A lot of what I keep reading online about shipping LLM agents to production skips over the database layer, and I think that is going to be the awkward part of the whole wave. Not because anyone is doing anything stupid. Because the assumptions baked into how we secure databases were written for a caller that does not really exist anymore. A traditional service hits the database with a small, predictable set of queries. You can review them, unit test them, put them behind d procedures and call it a day.