I need my application to explicitly select shard for every single connection. Not doing so should be an error, because it can lead to data compromise.

My proposal is to add option to default_shard as 'fail'. When that is the case, running query without setting shard (either by comment, or by set shard) will result in failure.