Expand description
Public, read-only ORM admission and deterministic keyset pagination.
This API never accepts SQL text. The ORM IR is validated before rendering, then the executor independently validates the rendered SELECT while holding the catalog fence used for authorization and complete result consumption.