Warehousd: MCP-ready governed data layer

Warehousd provides a robust framework for securely serving data as context to applications and tools. Its core functionality revolves around granular permission control, ensuring that only data explicitly granted to a user is ever retrieved, preventing leaks and maintaining strict data isolation. Key features include: * **Granular Data Access**: Defines precisely what data (fields, documents, collections) is available to each user or application. * **Context Scoping**: Dynamically scopes data context based on the requesting individual's permissions. * **Data Leak Prevention**: Ensures denied data is absent, not just hidden, making it unretrievable. * **Self-Hosted & Open Source**: Provides a transparent, controllable deployment option with Apache 2.0 licensing. * **Simple Deployment**: Operates with a single container and a PostgreSQL database for easy setup. Warehousd acts as a secure data broker, intercepting all data requests from applications. It meticulously checks each request against predefined grants, allowing only authorized information to become context. This approach means applications never directly access the raw data, enhancing security and auditability. The system supports various data types, from legal case files to HR records, ensuring that sensitive information like compensation expectations can be permanently excluded from any context generation. This platform is ideal for organizations that need to provide controlled access to internal data for various applications while adhering to strict privacy and compliance requirements. It's particularly useful for legal, HR, finance, and engineering teams who require a secure mechanism to share specific data segments without risking broader data exposure.