# Read-only database discovery

> Gather schema and bounded sample evidence without creating a hidden database writer.

Source: https://accd.github.io/verchestra/docs/workflows/read-only-database-discovery/
Content digest: `sha256:f63e5d7cd7b3a248732e81b0ff7e090b8e7d0a80a064118fca35541013eb268f`

Database probes use explicit read-only credentials and a database-specific capability plan.

The workflow:

1. identify the engine, topology, and approved schemas;
2. validate that the credential cannot write;
3. compile engine-specific metadata and bounded `SELECT` operations;
4. apply row, time, size, and sensitive-column limits;
5. emit redacted evidence with query digests;
6. close connections and preserve no credential material.

SAP ASE / Sybase is a first-class adapter. The same no-writer contract applies to PostgreSQL, MySQL/MariaDB, SQL Server, Oracle, SQLite, and MongoDB.

An ER model can improve discovery and should be registered as a source when available. It does not replace live, bounded metadata evidence.