> ## Documentation Index
> Fetch the complete documentation index at: https://warden.buildlab.in/llms.txt
> Use this file to discover all available pages before exploring further.

# What you get

> Every capability Warden offers today, what provides it, and what is still on the roadmap.

A feature-by-feature list of what the product does. Anything not built says so.

## Governing an operation

| Capability | State | Where |
| - | - | - |
| Engine-neutral parsing and classification (structure, never the leading keyword) | Shipped | [Architecture](https://warden.buildlab.in/concepts/architecture.md) |
| Blast-radius analysis — is this provably bounded? | Shipped | [Blast radius](https://warden.buildlab.in/concepts/blast-radius.md) |
| Policy: resources, columns, classes, approvals, limits | Shipped | [Policy](https://warden.buildlab.in/configure/policy.md) |
| Per-agent scoping, enforced inside the statement | Shipped | [Architecture](https://warden.buildlab.in/concepts/architecture.md) |
| Column restriction and field masking (redact, hash, tokenize, partial) | Shipped | [Masking](https://warden.buildlab.in/concepts/masking.md) |
| Row limits, statement timeouts, attribution comments | Shipped | [Policy](https://warden.buildlab.in/configure/policy.md) |
| Read-only transactions for reads | Shipped (PostgreSQL) | [PostgreSQL](https://warden.buildlab.in/engines/postgresql.md) |
| Relationship scoping (scope a child table through its parent) | Planned | [Roadmap](https://warden.buildlab.in/engines/roadmap.md) |
| Native row-level security as a second layer | Planned | [Roadmap](https://warden.buildlab.in/engines/roadmap.md) |

## Putting a human in the loop

| Capability | State | Where |
| - | - | - |
| Approvals: changes wait for a person | Shipped | [Approvals](https://warden.buildlab.in/configure/approvals.md) |
| Exact before/after previews, labelled by fidelity | Shipped | [Previews and fences](https://warden.buildlab.in/concepts/previews-and-fences.md) |
| Commit-time fences — a stale approval is refused | Shipped | [Previews and fences](https://warden.buildlab.in/concepts/previews-and-fences.md) |
| Async mode: `proposed` now, outcome polled later | Shipped | [Approvals](https://warden.buildlab.in/configure/approvals.md) |
| Debug Mode: step through an agent's traffic live | Shipped | [Debug Mode](https://warden.buildlab.in/operate/debug-mode.md) |
| Operator view in the browser, with a live event stream | Shipped | [Operator view](https://warden.buildlab.in/operate/operator-view.md) |
| Signed webhook notifications with the preview inline | Shipped | [Notifications](https://warden.buildlab.in/configure/notifications.md) |
| Slack approve/reject buttons | Planned | [Roadmap](https://warden.buildlab.in/engines/roadmap.md) |
| Automatic re-preview of a stale change | Planned | [Roadmap](https://warden.buildlab.in/engines/roadmap.md) |

## Keeping it accountable

| Capability | State | Where |
| - | - | - |
| Tamper-evident audit chain (hash-linked, verified on demand) | Shipped | [Audit](https://warden.buildlab.in/operate/audit.md) |
| Leases: agent access with an expiry, revocable | Shipped | [Leases](https://warden.buildlab.in/concepts/leases.md) |
| Circuit breakers: freeze a looping or misbehaving agent | Shipped | [Reliability](https://warden.buildlab.in/concepts/reliability.md) |
| Plan-aware idempotency, surviving a crash | Shipped | [Reliability](https://warden.buildlab.in/concepts/reliability.md) |
| Suspiciously-empty results flagged rather than returned as fact | Shipped | [Reliability](https://warden.buildlab.in/concepts/reliability.md) |
| Metrics: latency, denials, approval waits and expiry, breaker and lease events | Shipped | [Metrics](https://warden.buildlab.in/operate/metrics.md) |
| A real database role per lease, terminated on revoke | Shipped (PostgreSQL) | [PostgreSQL](https://warden.buildlab.in/engines/postgresql.md#a-role-per-lease) |
| SSO/SCIM, RBAC, signed policy bundles | Planned | [Roadmap](https://warden.buildlab.in/engines/roadmap.md) |

## Proving it

| Capability | State | Where |
| - | - | - |
| Capability ladder: every guarantee labelled by who enforces it | Shipped | [Capability ladder](https://warden.buildlab.in/concepts/capability-ladder.md) |
| A connection refuses to start when policy exceeds the engine | Shipped | [Capability ladder](https://warden.buildlab.in/concepts/capability-ladder.md) |
| Certification harness, run against a real server in CI | Shipped | [wardencert](https://warden.buildlab.in/offerings/wardencert.md) |
| Adversarial corpus (homoglyphs, smuggled writes, parameter escapes) | Shipped | [wardencert](https://warden.buildlab.in/offerings/wardencert.md) |

## Engines

| Engine | State |
| - | - |
| PostgreSQL | Reference connector, certified 84/84 strict |
| MongoDB | Second engine, certified strict against a replica set in CI — [MongoDB](https://warden.buildlab.in/engines/mongodb.md) |
| Neo4j | Third engine, certified strict against a live server in CI — [Neo4j](https://warden.buildlab.in/engines/neo4j.md) |
| In-memory reference engine | Shipped (testing and demos), certified 123/123 strict |
| MySQL | Designed, not built |
| Custom connectors (plugin SDK) | Planned |

## Interfaces

| Interface | State |
| - | - |
| HTTP data plane (agents) and control plane (operators) | Shipped |
| MCP server (`warden-mcp`) | Shipped |
| CLI (`warden serve`, `debug attach`, `audit tail`, `policy lint`, `keygen`) | Shipped |
| Operator view in the browser | Shipped |
| Python and TypeScript SDKs | Planned — [see why](https://warden.buildlab.in/offerings/sdks.md) |
| Hosted control plane / console | Planned |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.