On patient data the rule is no free-form SQL. The AI agent answers clinical questions by selecting a governed cohort operation + parameters (validated, read-only, parameterized) — it never writes SQL ...