Governed AI Data Assistant

Harbourline Supply Co. is fictional; its data is synthetic. Each persona queries through its own read-only Postgres login, so row-level security and column grants decide what an answer can contain.

1. Pick who is asking

2. Ask a sample question

3. Try to break it

Prompt injection, role spoofing and SQL tricks. Each runs live and is also an eval case that must pass before any change merges.

How to try it

Pick a persona. Each one is a separate read-only database login.
Click a sample question. Switch persona and ask a similar one: the answer changes.
Open "Show SQL" and "How this answer was built" to check the evidence.
Then try to break it: the attacks run live against the same agent.