SQLite
SQLite path requirements and adapter safety policy.
SQLite imports use an absolute path and the exact sqlite:/// prefix:
sqlite:///Users/me/data/warehouse.dbThe parser rejects hosts, usernames, query strings, fragments, and relative paths. It does not inspect or open the filesystem during import. On the first schema, table, or column discovery call—or a query—the runtime opens the file read-only and rejects symlinks, missing or empty files, and non-regular files; it never creates a missing file as a side effect.
The SQLite policy enables query-only and defensive modes, disables trusted schema behavior, and uses an authorizer to allow reads while denying extension loading and file-oriented functions such as readfile, writefile, and fsdir. Query execution is still bounded by the global timeout, row, and response-byte limits.