Back to Devoured - October 26, 2026
DEVOURED
Sutura (GitHub Repo)

Sutura (GitHub Repo)

Data infrastructureagentsrust GitHub
Sutura is a Rust-based semantic data runtime that acts as a secure intermediary between AI agents and raw database tables.
What: Developed by Deutsche Telekom, Sutura uses Apache DataFusion to serve certified metrics and semantic definitions to agents via HTTP or MCP, enforcing identity and data-source policies during query execution.
Why it matters: This addresses a major security gap in agentic systems where LLMs often lack the context to query databases correctly or safely, shifting access from raw SQL to a governed semantic layer.
Deep dive
  • Governance: Provides a mandatory access boundary between agents and backend systems.
  • Semantic Layer: Exposes business metrics rather than raw warehouse tables.
  • Federation: Can execute queries across multiple data sources using Apache Arrow and DataFusion.
  • Integration: Compatible with both HTTP and Model Context Protocol (MCP) interfaces.
  • Security: Enforces caller identity verification per data source.
Decoder
  • MCP (Model Context Protocol): An open standard for connecting AI assistants to data sources and development tools.
  • Apache DataFusion: An extensible query execution framework written in Rust.
  • Apache Arrow: A cross-language development platform for in-memory data.
Original article

sutura

sutura is a semantic data runtime written in Rust. It serves queries over HTTP and MCP. By default, queries use certified metric definitions. Metadata and data sources connect through adapters. A query can combine data from several sources.

Deployments can verify caller tokens. Each data source declares the identity it uses. See identity verification for each identity claim and its environment.

Technology

  • Apache DataFusion executes local queries.
  • Apache Arrow carries result batches inside the runtime.
  • ADBC connects to data systems.
  • polyglot-sql renders SQL for each dialect.
  • Wren and Spice provide design references for semantic models and query federation.

See architecture and integrations for details.

Documentation and examples

  • Documentation
  • Getting started
  • Examples
  • Contributing

Licence

Apache-2.0. See VENDOR.md for third-party material. Report suspected vulnerabilities through SECURITY.md.

Explore all 69 articles in today's digest

Fresh dev news, AI-digested daily. Never miss a trend at devoured.fyi