sferarc is a small product studio.

We build software products for developers and teams, and publish the open source libraries underneath them. When a product uses AI, it shows what it did and why, so a person can check it.

PgBeam

Available

A Postgres proxy that sits between AI agents and your database and enforces what each agent may do, in the wire protocol, before a query reaches Postgres.

Scoped credentials for each agent, with a read-only mode
Table and column allowlists, and row filters
PII masked before it leaves the database
Query budgets and a kill switch
A tamper-evident audit log of every query
A hosted MCP endpoint for agents
Works with any Postgres host, with no code changes

Visit pgbeam.com

# Swap one connection string

DATABASE_URL=postgres://agent_x:••••@abc.proxy.pgbeam.app/app

# Then read what each agent did

SELECT id, email FROM users LIMIT 20masked · email masked
SELECT count(*) FROM ordersallowed · read only
UPDATE orders SET status = 'void'blocked · writes not allowed

Example entries. Every query lands in a tamper-evident audit log a person can review.

Nuclom
Available
Your team's knowledge in one place. Nuclom pulls in Slack, Notion, GitHub and meeting recordings, keeps track of decisions and who knows what, and answers questions with sources.
nuclom.com
Aula
Coming soon
A teaching site of their own for independent teachers and small schools: a profile, subjects and lesson types on the teacher's own address. Booking in each student's time zone and payments to the teacher come next.

Open source

Libraries that came out of building the products, on GitHub under permissive licenses.

AI and agents

promptscan
Go · Apache-2.0
Finds hostile content aimed at a model in untrusted text: bidi overrides, mixed-script words and Unicode tag-block smuggling.
```
$ go get github.com/sferarc/promptscan
```
ai-gateway-proxy
TypeScript · MIT
An OpenAI-compatible proxy handler for the Vercel AI Gateway.
```
$ npm install ai-gateway-proxy
```
vscode-ai-gateway
TypeScript · MIT
A VS Code extension that brings Vercel AI Gateway models to chat.
Install from the Visual Studio Marketplace.

Databases

pgscram
Go · Apache-2.0
A codec for Postgres SCRAM-SHA-256 password verifiers, with no dependencies.
```
$ go get github.com/sferarc/pgscram
```
schemadigest
Go · Apache-2.0
Reads a Postgres catalog and reduces it to a compact schema summary that fits in a model's context.
```
$ go get github.com/sferarc/schemadigest
```
pgbeam-conformance
Test vectors · Apache-2.0
What PgBeam's policy engine decides, written down as machine-readable test cases.

Integrity

auditchain
Go · Apache-2.0
Tamper-evident, append-only logs with optional signed checkpoints.
```
$ go get github.com/sferarc/auditchain
```

API clients and build tooling

openapi
TypeScript · ISC
Type-safe TypeScript clients generated from public OpenAPI specs.
Published on npm:
rollup-plugin-import-cdn
TypeScript · ISC
A Rollup plugin that resolves bare imports to CDN URLs.
```
$ npm install rollup-plugin-import-cdn
```

PgBeam SDKs and tools

Clients, a CLI and infrastructure providers for the PgBeam API, all Apache-2.0.

TypeScript SDK
```
$ npm install pgbeam
```
Go SDK
```
$ go get go.pgbeam.com/sdk
```
Python SDK
```
$ pip install pgbeam
```
CLI
```
$ brew install sferarc/pgbeam/pgbeam
```
Terraform provider
Pulumi provider
Crossplane provider

Contact

Find us on GitHub at github.com/sferarc. Questions about a product go to that product's site.