Query the Database Directly

How this works: the browser holds a publishable (anon) API key, scoped by Postgres row-level security to read-only access on the public marts (themes, metrics, fct_metric_observations) — the same tables that back the static JSON files. The raw landing tables (raw.*) have RLS enabled with no policy at all, so they're unreachable from here no matter what. This is a deliberate architecture choice: static JSON for the content pages (fast, cacheable, no runtime dependency on the database being up), one live page to demonstrate the underlying platform actually is a real, queryable database.