live wire
▸Snowflake’s Cortex Agent quickstart routes metrics and transcripts with prompt rules—but documents no authorization boundarySnowflake▸Oracle Select AI generates SQL/PGQ for property graphs—but errors if one AI profile mixes graphs with tables or viewsOracle▸Domo’s data team standardizes MCP builds with shared scaffolding; beta toolkits inherit user permissionsDomo▸Databricks proposes five outcome signals for agentic BI—and says dashboard counts and license usage miss decision qualityDatabricks▸One vibe-coded database app needed 56+ human test hours and three repair rounds despite AI Studio’s verification claimsMancas & Mancas / arXiv▸BigQuery AI.IF’s default cost mode trains a local model for most rows—and drops row-error thresholdsGoogle Cloud▸AWS’s multi-tenant data-agent pattern gives the broker Lambda no data permissions; Cognito roles carry Lake Formation scopeAWS Big Data Blog▸Amazon OpenSearch’s optimized engine adds nested agent traces, but AWS reserves it for log analytics—not vector searchAWS▸Two interpretation-based provenance semantics cannot express SQL bag difference, new theorem showsKolaitis / arXiv▸Databricks Feature Views reuse one definition for training and live scoring, but online lookup still returns latest available stateDatabricks▸Databricks Genie’s Slack and Teams previews default channel answers to public, even when viewers lack source-data accessDatabricks▸Snowflake’s two-tool GraphRAG agent beat a seven-tool graph setup 70% to 60% on 22 ontology questionsSnowflake Engineering▸Semantix opens an Apache-2.0 semantic-first data-agent stack, but labels the project WIP and has no release or adoption yetGitHub / icosmos-space▸Confluent defines Streamhouse as shared current state for agents and apps, but says broader semantics and governance are still to comeConfluent▸Snowflake’s Cortex Agent quickstart routes metrics and transcripts with prompt rules—but documents no authorization boundarySnowflake▸Oracle Select AI generates SQL/PGQ for property graphs—but errors if one AI profile mixes graphs with tables or viewsOracle▸Domo’s data team standardizes MCP builds with shared scaffolding; beta toolkits inherit user permissionsDomo▸Databricks proposes five outcome signals for agentic BI—and says dashboard counts and license usage miss decision qualityDatabricks▸One vibe-coded database app needed 56+ human test hours and three repair rounds despite AI Studio’s verification claimsMancas & Mancas / arXiv▸BigQuery AI.IF’s default cost mode trains a local model for most rows—and drops row-error thresholdsGoogle Cloud▸AWS’s multi-tenant data-agent pattern gives the broker Lambda no data permissions; Cognito roles carry Lake Formation scopeAWS Big Data Blog▸Amazon OpenSearch’s optimized engine adds nested agent traces, but AWS reserves it for log analytics—not vector searchAWS▸Two interpretation-based provenance semantics cannot express SQL bag difference, new theorem showsKolaitis / arXiv▸Databricks Feature Views reuse one definition for training and live scoring, but online lookup still returns latest available stateDatabricks▸Databricks Genie’s Slack and Teams previews default channel answers to public, even when viewers lack source-data accessDatabricks▸Snowflake’s two-tool GraphRAG agent beat a seven-tool graph setup 70% to 60% on 22 ontology questionsSnowflake Engineering▸Semantix opens an Apache-2.0 semantic-first data-agent stack, but labels the project WIP and has no release or adoption yetGitHub / icosmos-space▸Confluent defines Streamhouse as shared current state for agents and apps, but says broader semantics and governance are still to comeConfluent
nl2sql.ai
releaseNew entrant

QueryLens launches with a useful benchmark result: none yet

The new PostgreSQL text-to-SQL stack separates its safety controls from its prompt—and labels every planned BIRD number as unmeasured.

Text-to-SQL launch with no benchmark result yet
AI-generated illustration
By The Tools Desk· Sep 30, 2026the quick take — two AI hosts go live when you do

QueryLens arrived as a work-in-progress text-to-SQL application with an unusually clear line between what its repository implements and what it has not yet proved. The project’s README says that every benchmark number will come from evaluation output files and, more importantly, that none of those numbers has been measured yet.

That disclaimer is the most useful part of the launch. New analytics-agent repositories often put benchmark names beside architectural claims before readers can inspect a completed run. QueryLens instead describes a planned BIRD mini-dev evaluation with ablations for schema retrieval and self-correction, while withholding an accuracy claim until outputs exist. It is not evidence that the system works well; it is evidence that the author knows the difference between an evaluation plan and a result.

Safety is split into layers

The implementation is aimed at PostgreSQL and pairs a FastAPI backend with a Vue 3 interface. Its documented execution boundary combines a read-only database role, read-only transactions, timeouts and an AST validator. The README explicitly says the prompt is not a security layer. That matters because a model instruction such as “only write SELECT statements” is not an enforcement mechanism: QueryLens’s design puts several controls between generated SQL and the database.

The repository also describes local-embedding schema retrieval through pgvector, self-correction, Redis caching and rate limiting. Its interface is intended to expose the generated SQL alongside a result table and chart, rather than returning only a prose answer. Follow-up questions are part of the planned interaction model.

What is actually available

At inspection on September 30, the public repository showed 22 commits, no tagged releases, no stars and no forks. GitHub displayed no license for the project. That means the code is inspectable, but users should not infer permission to reuse or redistribute it until the maintainer adds explicit terms.

The near-term test is straightforward: publish the promised BIRD output files, preserve model replies so the run can be audited, and show the ablations separately. Until then, QueryLens belongs in the directory as an inspectable new entrant—not as a benchmarked one.

That distinction is worth preserving. A blank scorecard with a reproducible plan is more informative than a polished percentage without artifacts.

Filed by The Tools Desk. Corrections: desk@nl2sql.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.