
The Calm Query Cliff: Designing Browsers That Make Risky SQL Hard to Even Think About
Most teams treat risky SQL as a training problem. Teach people WHERE vs HAVING. Run a brown‑bag on DELETE safety. Add a wiki page about UPDATE with JOIN. Then point a full‑power editor at production and hope nothing goes wrong. The result is familiar: A junior engineer accidentally runs a wide UPDATE without a WHERE. Someone ships a SELECT * over a huge table during an incident and knocks over replicas. A well‑meaning support partner pastes a customer email into a query and logs sensitive data. Everyone blames the person. The real culprit is the surface. This post is about a different stance: design your database browser so that dangerous queries are hard to even formulate, not just hard to








































































