N6k – Let users and agents run untrusted SQL on production databases

n6kd, an open-source server on GitHub, exposes DuckDB catalogs over WebSocket using the n6k protocol, so users and AI agents can run SQL against production data under row-level limits. A YAML policy sets per-table select, insert, update and delete predicates, and OIDC token claims such as $sub can scope each client to its own rows. Without a policy file, every catalog is served read/write. The project's documentation is the only source for these claims, and it shows no independent testing.