Platform Fundamentals · Lesson 04
Block destructive queries at the protocol layer before they hit your database
What you’ll learn
Learning objectives
Key concepts
Guardrail
A real-time execution policy that sits at the protocol layer and evaluates every query before it executes. If a query matches the rule, it is blocked instantly.
Pattern matching
A guardrail rule type that compares incoming queries against a defined pattern. Matching queries are blocked at the protocol layer before reaching the database.
Preset rules
Built-in guardrail templates available out of the box, intended to cover common destructive query patterns without requiring custom configuration.
Custom rules
User-defined guardrail rules. The host uses one to prevent mass deletion in this lesson.
Resource scoping
Each guardrail rule is assigned to one or more specific resources. The rule only enforces on those resources.
Equal coverage for humans and AI agents
Guardrails evaluate queries regardless of origin. A query from an AI agent goes through the same protocol-layer policy check as a query from a human engineer.
Block-and-log
When a guardrail blocks a query, the user receives a clear message, the database is not touched, and the attempt is logged in the session audit trail.
Check what you learned
Answer each one to reveal the explanation. You can change your selection any time.
Answer 4 short questions about this lesson.
End of track
Browse the rest of Hoop University, or pick another track.