- Hand-rolled , params with sql.raw() didn't actually bind values - Drizzle's sql.raw() just inserts literal text — no parameter binding - Replaced with proper sql`` tagged templates + sql.join() for conditions - Each filter now correctly binds via drizzle's parameterized query