Repository navigation
Table and schema reads keep the requested tenant and workspace through their parent joins. Snapshot metadata is returned only when its table, dataset, tenant and workspace match; an invalid pointer no longer exposes metadata from another scope.
The Python SDK includes AgentReadClient for bounded, GET-only dataset, table and schema-object reads. Its scope is fixed when constructed. It validates parent snapshots and rejects incomplete catalogs, redirects and oversized responses. It cannot execute queries. See the SDK guide.
Server and SDK versions are 26.10.4. Both Java JARs include the Apache license; protocol shapes and third-party dependencies are unchanged.
Validation includes passing PR CI, independent source/security review and an additional local PostgreSQL exercise of snapshot-pointer and scope boundaries. The CI report retains 15 integration and 135 Java skips. The forge adapter and prepared-result agent mirror remain separate work.