I don't actually even see the real engineering challenge of whitisting queries, outside of documentation and communicating errors. It just because a confusing

I don't actually even see the real engineering challenge of whitisting queries, outside of documentation and communicating errors. It just because a confusing and unhelpful protocol choice if you start whitelisting queries. Without the "query" part it's just a DSL for graph retreival. Why not put that client side if it is so expressive.