Self-hosted governance layer between AI assistants and your real data. Deterministic PII masking, allow/deny policy, hash-chained audit, offline-verifiable Ed25519 receipts per access when a receipt sink is configured, coverage reconciliation against the DB's own query counters to surface gateway bypasses, and conformance vectors. MCP-native. MIT.
MCP server Claude CodeCodexCursor +2
Governed database access for AI assistants: masking, signed receipts, coverage reconciliation. Runs locally from the @conarium-ai/core npm package.