One thing worth flagging that isn't in the README — the tautological-WHERE detection was the hardest part of the rule engine. Catches DELETE FROM users WHERE 1=1 patterns that LLMs produce when they're "trying to be safe" by adding a WHERE clause but generating one that matches everything. Failure mode we saw in the 13K command dataset.