Warehousd serves your data to AI agents and apps as context, scoped to the person asking. Anything outside the grants is never retrieved, so it cannot leak. Denied means absent. Apache 2.0, self-hosted, one container and one Postgres.