Blog

Stories from the Limetry team

Release notes, engineering deep-dives, and community stories.

Use CasesSQL10 min read

Add approval-gated SQL writes without exposing DATABASE_URL

September 19, 2026

Allow sql.read, park sql.write for human approval, deny sql.ddl. Agent never sees the connection string.

Use CasesSQL11 min read

Deny sql.write before the database sees a mass DELETE

September 17, 2026

Production DATABASE_URL in Cursor MCP plus a bad LIKE predicate. @limetry/sql denies sql.write before the database executes.

Use CasesShopify10 min read

Shadow-evaluate Shopify mutations before enforcement

September 12, 2026

Run dryRun for a week on live traffic, confirm zero false denies, then move the Admin token behind the firewall.

Use CasesShopify11 min read

Stop a fourteen-refund batch before Shopify settles

September 10, 2026

With @limetry/shopify in path: small refunds allow, larger ones park for approval, duplicates never hit Shopify.

Use CasesCI10 min read

Stage the CI gate from non-required to required

September 5, 2026

Run evaluate as a non-required job for one week, verify classifications in audit, then make the check required.

Use CasesCI11 min read

Deny deploy on a Copilot PR burst before production credentials

September 3, 2026

Twelve Copilot PRs hit pull_request_target beside configure-cloud-credentials. Evaluate denied deploy before production credentials minted.

Use CasesSQL9 min read

Gate SQL writes so agents never hold DATABASE_URL

August 14, 2026

Use @limetry/sql to classify, evaluate, and execute SQL statements while keeping DATABASE_URL out of the agent.

Use CasesCI10 min read

Evaluate before CI loads credentials

August 5, 2026

Use @limetry/ci to evaluate ci_privilege and deploy intents before workflows load secrets or production credentials.

Use CasesShopify9 min read

Gate Shopify Admin mutations for AI support agents

July 25, 2026

Hold SHOPIFY_ADMIN_TOKEN in @limetry/shopify, evaluate refund, discount, and inventory intents, and proxy to Shopify only on allow.

SDKIntegrations6 min read

Require evaluate in Gemini and Antigravity skills

June 28, 2026

Add a workspace skill that instructs the assistant to run Limetry evaluate before paid-platform side effects.

MCPIntegrations5 min read

Configure the Limetry MCP server

June 11, 2026

EngineeringSecurity9 min read

Coordinate multi-agent marketplaces with shared action policy

June 2, 2026

Evaluate each sensitive request as an ActionIntent against shared marketplace policy and privacy-safe audit—without holding funds.

IntegrationsSecurity7 min read

Enforce cloud budget limits for Slack bot agents

May 31, 2026

Call evaluate inside the handler before the scale API so channel budget policy can deny oversized cloud upgrades.

LaunchIntegrations8 min read

Cap agent purchases with action policy cost limits

May 21, 2026

Configure max_cost_minor and allowed action types so purchase-shaped tool calls evaluate before they run.

SDKIntegrations6 min read

Call the Limetry SDK remotely from remote runtimes

May 10, 2026

POST evaluate from Node or any remote runtime. Point baseUrl at your self-run Limetry server.

LaunchEngineering8 min read

Open-source agent action governance

April 14, 2026

Evaluate agent tool calls against ActionPolicy, return allow/deny with reasons, and store a privacy-safe audit trail. Self-host the open source evaluation server.