Allowing an LLM to query a production graph requires strict syntactic and security boundaries. We examine schema slicing, few-shot dynamic exemplar retrieval, and AST parsing that rejects any query containing mutating keywords like DELETE or DROP before reaching the database driver.