yeah, not really, actually. in my opinion, they may work, but with tradeoffs

api wrappers are safe, but they kill flexibility of AI agent and will have massive maintenance bottleneck

db-level security is a great runtime boundary, but it is completely disconnected from application business logic