Enforces GrantForge policies for MySQL 8 servers as a proxy that clients connect to in place of the server: it relays MySQL's protocol and sign-in, checks every statement against the service's signed policy snapshot down to columns, rewrites reads with the masks and row filters that apply, and reports access events. One runnable jar.