Live session
A real agent. A real approval. A real database.
Nothing recorded and nothing to install: we run it with you. An enrolled Claude Code or Codex agent asks for access to a real Postgres database, and a named person decides, live, whether it gets it.
What you'll see
An agent is denied, a person approves, access expires.
01
The agent asks for a database it has no policy for, and is denied outright.
02
A named person approves that exact read, live, signing in against their own directory.
03
A short-lived access is granted on approval, and the agent never sees the secret.
04
The window closes, the same query fails, and the whole session is sitting in the audit trail.
Bring whoever would try to break it.
We run it against a target you can inspect afterward, and answer the hard questions live.