Postgres backend your coding agent builds over MCP; destructive actions wait for a person.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.