hyuga

TypeScript and Node with no runtime dependencies. MySQL, PostgreSQL and SQLite, and the places where the three of them quietly disagree about what a rollback and a row count mean.

How much of a codebase an audit silently skips. The last one returned 21 findings and had never opened the only file that writes to production; scoped to that file, it returned 23.

llm-safe-sql: let a model propose an UPDATE, run it for real in a transaction, measure the actual before/after values, always roll back, and let a human approve the measurement rather than a summary.

Bug reports against anything I publish, especially the kind that start "your tool told me X and the database says Y". Those are the ones I cannot find on my own.