> Parse analysis won't remove information from the query
That's right.
PostgreSQL's parse analysis keeps a statement structure with token-by-token in the parse tree, and PostgreSQL's query jumbling calculates a hash value from the parse tree.
So, it's possible to find something strange in the statement(s) if someone attempts to cheat.
> there are many development shops that don't have strong database development talent on hand and really treat the database as some black box where to stuff data.
Exactly. That's the reason why we still see lots of SQL injection attacks and incidents, and the reason why I have created this module. :)
It is definitely inspired by Kiro by Amazon. (unfortunately, I'm still on the wishlist.)
It works fine for me, and I would recommend this approach to understand how AI-assisted coding works.