Safety & guardrails

How safe mode protects production

Updated 2026-06-18 · 1 min read

Read-only by default, destructive-statement detection, and a review step before anything touches prod.

Every connection can be flagged read-only. When it is, AddisDB classifies each statement before it runs and blocks anything that would write or change schema.

What gets flagged

  • DELETE / UPDATE without a WHERE clause
  • DROP, TRUNCATE and other destructive DDL
  • Statements that would affect more rows than your configured threshold

Reviewing a migration

When you generate schema changes (directly or through Drizzle Kit / Prisma), AddisDB shows the exact SQL and the estimated impact so you can read every line before it hits prod.

-- AddisDB shows you this diff and waits for your OK
ALTER TABLE orders
  ADD COLUMN refunded_at timestamptz;