Questions that come up first

It is at v0.1.0 alpha. The core surface is implemented and tested, and the release binaries and images are published — but treat it as alpha software and read the deploy guide before you rely on it.

Authorization is workspace-scoped: every member reads everything, and writes need the workspace administrator. That suits a single-tenant, self-hosted deployment; it is not a multi-tenant isolation model.

One Go binary and a PostgreSQL database it can reach. No message queue, no object store, no search cluster.

Nowhere. Metadata and lineage stay in your PostgreSQL. The one outbound call the product can make is the LLM provider you configure for SQL explanation, and it sees only the statement and the metadata you selected.

Apache-2.0. Self-host it, modify it, run it commercially.