Ask a plain-English question about the Remy tables and get the rows back.

gpt-4o-mini writes one SELECT against the remy_* schema; it is checked before it runs and then executed READ ONLY under its own statement timeout, so no question can write, reach another schema, or hold a worker open. The statement comes back on the response so any answer can be audited against what actually ran.

Internal accounts only — a generated statement cannot be reliably scoped to one user's roster, so the route is gated on shared-corpus access rather than trusting the model to filter by user_id.