A SELECT-only SQL engine and the verification layer in front of it. Every stage below is the real one the query passed through.
Static demo Every result was computed by the real engine; LLM answers are recorded responses.
The engine implements SELECT and nothing else, so a destructive statement has no grammar production to parse into.
Ask a question, or write SQL. You will see what the parser made of it, what the verifier decided, both query plans, and the rows.