I added a client-side SQL sanitizer so schema never touches our servers

Write your take first — we'll ask for email only when you're ready to publish.