Data security depends on system permissions, not just AI prompts, project shows

A developer explores data security boundaries in an analytics project called MerchantLens, built with Databricks and Unity Catalog. The project demonstrates that an AI agent's ability to access sensitive data is ultimately controlled by pre-configured database permissions, not by the instructions given in a prompt. Access is enforced through column masking and row filtering applied by the Unity Catalog based on the agent's service identity. The security relies on correct identity configuration and grants, not on the application logic alone. A key lesson is that permissions must be tested under the actual executing identity to verify the intended data restrictions.