Why we stopped letting AI agents connect directly to the database

How an AI agent can use ERP data safely: a read-only replica inside your network, contract-based queries and an outbound-only connection, no credential exposed.