This looks really cool! Tools like Retool are great, but they tend to be yet another thing to maintain in the long run, adding to the cognitive load.

Would there be a means of limiting which services and functions each query can call manually to impose more specified guardrails? and how is the “human in the loop” thing enforced?

Hey HN, it’s John, one of the authors here.

We are excited to hear your thoughts and answer any questions about the project.