Zero Trust Security stopped trusting the network. Zero Trust Data stops trusting the query. When models read untrusted input and write queries, the database itself must be the boundary. Give every tenant, user, and agent a database that physically contains only what it may touch. Injection has nowhere to go.