The padlock: the gate stays down unless you run serve --ask with ANTHROPIC_API_KEY set (A)Light leaving in indigo (question, schema, trimmed rows); SQL in teal; errors in red; the answer in amberSpace asks the example question again; W sends a write, which the read-only check refusesAsk is the only part of Aftertrace that sends anything off your machine, and it is off by default. When it is on, your question and the store's schema go to claude-opus-5-5. The model answers with SQL; Aftertrace checks that it is a single read-only SELECT or WITH, runs it on the local store in a transaction that is rolled back, and sends back at most 50 rows with every string cut to 200 characters. Errors go back too, so the model can fix its query. After at most 8 model calls it must give a final answer; its SQL is run again here for the table you see, which is not sent.