Read only mode is not enforced

[vim-zz]

I have configured rdbc as following, disabled sql_exec tool, but the agent (codex) has been able to delete a record.

[mcp_servers.rdbc]
command = "rbdc-mcp"
args = ["--database-url", "sqlite://./mydb.db"]
disabled_tools = ["sql_exec"]

• Called
  └ rdbc.sql_query({"sql":"DELETE FROM run_osd_metric_ranges WHERE video_id = 'vid-
        f803746be6d9ae16';"})
    []

• Called rdbc.sql_query({"sql":"DELETE FROM video_outputs WHERE video_id = 'vid-f803746be6d9ae16';"})
  └ []

• Called
  └ rdbc.sql_query({"sql":"SELECT COUNT(*) AS cnt_video_outputs FROM video_outputs WHERE video_id =
        'vid-f803746be6d9ae16';"})
    [{"cnt_video_outputs": 0}]