Keep SQLite data in a private child directory, not at the Docker volume root
Mounting a durable volume straight onto the directory you chmod’d in the image throws away that permission — bake a private child path instead.
Sqlite
Idempotent, budget-bounded AI queries on a single SQLite writer
How northway’s SQLite store keeps paid AI-provider queries idempotent and budget-bounded, using a single writer, lease-based claims, and a reserve-then-settle spend model.