Supplementary Artifact S1: Layered Policy Enforcement for LLM Database Agents

Public reproducibility package supporting the manuscript “Layered Policy Enforcement for LLM Database Agents: Cross-Provider Evaluation of Containment and Compliance.” Version 1.1 updates the associated-manuscript metadata and citation files for submission to Computers and Electrical Engineering while preserving historically frozen protocol and audit records unchanged. The package contains a machine-readable P1–P7 policy profile, a 90-item synthetic benchmark, synthetic schemas and deterministic oracles, frozen protocols, public run records, self-contained analysis scripts, aggregate authentic-validation evidence, and SHA-256 manifests. The authentic deployment is pseudonymized as Site A. Authentic source records, school and student identifiers, pseudonym values, secrets, credentials, raw prompts and model outputs, restricted traces, videos, consent forms, and IRB documents are excluded under IRB, consent, and institutional-governance constraints. Included code is a materially simplified and modified synthetic reference implementation, not the production system source. Code and analysis tooling are MIT-licensed; fully synthetic and non-authentic research materials are CC BY 4.0; aggregate-only authentic-study materials are CC BY-NC 4.0. See LICENSE.md and PUBLIC_DISCLOSURE_BOUNDARY.md in the archive.