Audit · kernel 2.73.13 · w5-license

Can a dual-engine workgroup mitigate the traps and still COMMIT?

Yes as analogs in one process, leftover named. No as FairCom, MySQL MyISAM, Always On, or a TPC letter. Workbench tools stay free. Production is a 30-day trial, then a license from your account. Analog ≠ native. We do not claim a 3PAO letter.

LIVEanalogleftoverno / refusemitigated analog

Kernel 2.73.13. testdb HA analog, isolation analog, hash-journal analog. Analog ≠ native is still law.

what

What “dual-engine workgroup, SQL + ISAM in one process” means here

Two ways to ask the same filing cabinet. One memory. One DDF. Not two servers glued with a bridge.

analog

What is the SQL engine?

Declarative questions: SELECT / DDL / SHOW. The kernel figures the path. Same tenant DDF as ISAM. Not Postgres wire LIVE.

Postgres wire leftover EXTERNAL. T-SQL wire leftover EXTERNAL.

analog

What is Tachyon ISAM?

Record-level walk: Insert, GetEqual, GetNext. The 1990s workgroup shape (keyed-file ISAM job). Same files as SQL.

Native ISAM library leftover EXTERNAL. Not a drop-in keyed-file binary.

analog

Is the Tachyon ISAM Open analog a drop-in requester?

Workbench leftover: opcodes map onto Tachyon ISAM Insert/GetEqual/GetNext. Open required (status 3). Nested Begin is 37. End without Begin is 38. Empty key is 6. analog 128-byte pos-block named. Host kernel stays 2.73.13. Not engine 3.

Native requester leftover EXTERNAL. MKDE leftover EXTERNAL. TCP 1583 requester leftover EXTERNAL.

pack15Selftest btrcall-not-open · tx-nested · tx-end-without · velodat1

analog

Certified OGC API Features?

Workbench leftover: RFC 7946 Point FeatureCollection with no crs. OGC next is a v2 opaque cursor with analog TTL 900s and collection bind. Token never on next. Host kernel stays 2.73.13.

Certified OGC / CQL2 / Part 4 CRUD / WMTS leftover EXTERNAL. HMAC-SHA / JWT / KMS leftover EXTERNAL. RISK-10 OPEN.

pack15Selftest cursor-v2-prefix · cursor-ttl-refuse · cursor-collection-bind

live

Why “in one process” matters

SQL and Tachyon ISAM run in one workgroup process. No replication delay between a barcode-class write and a SHOW. Unplug optional keys; the plane stays up. You do not need a region to COMMIT.

Native TCP mux 1583/2143 leftover EXTERNAL. We do not host this kernel on our server for Workbench.

live

What is a workgroup here?

One unit of people and files. 5-user Standard $999 or unlimited Standard $3,499. testdb HA and journal unlock are Enterprise $9,999.

Not a fleet. Not a region. testdb HA and journal unlock are Enterprise $9,999.

others

Do others already do this?

Rare. Specialized. We analog the job. We do not steal the binary.

leftover

1990s keyed-file workgroup engines

Native ISAM workgroup binaries exist. We analog the job on this kernel. We are not a drop-in replacement for those binaries.

Drop-in native ISAM library refused. TCP 1583 mux leftover EXTERNAL.

leftover

FairCom DB / c-treeACE No+SQL

Same job class: raw ISAM-class APIs plus SQL on one memory space. OEM-embedded. We analog the job. We are not FairCom.

Brief’s $17–25M estimate is unverified and not our number. We do not smash $9,999 against it.

no

MySQL MyISAM

Historical SQL+ISAM in one process. Industry moved to InnoDB because MyISAM lacked row locks and crash safety. We do not claim MyISAM compatibility. Our WAL analog and isolation analog are the opposite lesson.

MySQL is Oracle’s. Sun paid $1B in 2008 — public history, not a Veloce comparable.

analog

If we can do this plus the rest, is it already valuable?

Technically yes as a workgroup close: no core pack, no CAL, no region to COMMIT, digest job after QLDB died. Commercially only if we survive tooling, concurrency, and leftover-honest stamps. Analog ≠ native. We do not claim a 3PAO letter.

Do not advertise Ferrari. Advertise leftover-honest stamps.

ecosystem

1. Ecosystem & plug-in architecture

A database is a lonely island without bridges. We name the bridges we have and the ones we refuse to fake.

leftover

Native Python / Go / Rust / Node client libraries?

veloce-stdio/0 is the same compiler in a pipe (27 envelope codes). Official language SDKs leftover EXTERNAL this cut. The tab and the stdio analog are the two LIVE doors.

Host Linux CLI / musl leftover EXTERNAL. Official SDK leftover EXTERNAL.

stdioProtocolSelftest in hash-journal-selftest.mjs

leftover

PowerBI / Tableau / Looker over ODBC/JDBC?

No official ODBC/JDBC driver this cut. Analysts export CSV and use the in-tab desks (CSV doctor, IN-clause, Markdown). We will not tick a PowerBI badge.

ODBC/JDBC leftover EXTERNAL.

analog

LangChain / LlamaIndex / MCP?

MCP SQL stays 17. No 18th this cut. Full LiveOps MCP registry is larger and tenant-fenced; agents get a least-privilege subset via selectToolsForGoal (≤8). Speak/MCP default-off. HITL is auth. Chat text is not authority.

Official LangChain/LlamaIndex adapter leftover EXTERNAL. Speak is not the H1.

MCP_SQL_TOOLS.length === 17 PASS

analog

One-click ingest from keyed-file ISAM, DBF, or GPKG?

Workbench analog leftover (pack 16): shared sniff/refuse/teach/lossless in this tab. Teaching fixtures can be lossless. Foreign encrypt/compress/missing sidecar refuse-before-guess. analog ≠ native. Live hosts stay 2.73.13. Not engine 3.

Requester DLLs leftover EXTERNAL. Cipher leftover EXTERNAL.

leftover

Prisma / Hibernate / Entity Framework?

No wire-compatible SQL dialect for those ORMs. Developers talk SHOW / SQL analog in the tab or veloce-stdio.

ORM drop-in leftover EXTERNAL.

concurrency

2. Single-process locking & concurrency

The trap that kills home-grown dual engines. We analog isolation. We do not claim native PG SSI.

mitigated

Does a fat SQL JOIN freeze ISAM ingest?

Isolation analog: SET/SHOW TRANSACTION ISOLATION LEVEL. Default fail-closed SERIALIZABLE. ISOLATION_PROBE names dirty_read, non_repeatable, phantom, write_skew, dirty_write. Cluster lab locksteps RC/RR/SI/SSI. This is in-process analog, not a proven 50k writes/sec vs 10M-row scan on metal.

Native PostgreSQL SSI + Clojure Elle leftover EXTERNAL. No TPC-C mixed-workload whitepaper.

isolationSelftest 11/11 PASS

leftover

Row / page / table locks? MVCC?

engine.ts has a locks Map (shared/exclusive) that is size-checked. Swarm TTL keys exist. GetEqual/INSERT do not acquire row locks. Do not advertise a lock manager.

Native row/page/table lock manager leftover EXTERNAL. Lock-escalation leftover EXTERNAL.

analog

Can we throttle SQL RAM so a scan cannot OOM the ISAM process?

Workbench tape is RAM-bound (64-row window + 96 KB session ring). OPFS + vibe-wasm heap analogs exist. There is no production cgroup-style SQL memory quota on a native mux.

OS OOM killer on a hosted binary leftover EXTERNAL — Workbench is a tab.

tapeRingSelftest PASS

cloud

3. Cloud native & DevOps

Workgroups here are closable. Region is not the default.

leftover

Docker / Kubernetes orchestration as the product?

Dockerfile exists for the app builder. Helm operator LIVE is refused. etcdctl leftover EXTERNAL. The product is the in-browser kernel + trial key, not a managed region.

Helm operator leftover EXTERNAL. Managed k8s leftover EXTERNAL.

analog

Prometheus / Grafana out of the box?

Grafana dashboard JSON export from live engine metrics. Prometheus text exposition analog on the GHL bridge. First trace without a collector bill is the invert. Empty key → empty badge.

Cloud Grafana / Gremlin leftover EXTERNAL. Connected badge on an empty key refused.

analog

Raspberry Pi / industrial gateway?

The kernel is a tab + OPFS. That is as small as Workbench gets. We do not ship a measured Pi image or claim FairCom’s device OEM footprint.

Pi / ARM gateway image leftover EXTERNAL.

analog

Thousands of short-lived connections / PgBouncer?

In-process session mux: session / transaction / statement modes, DISCARD ALL, wait-timeout, tenant FIFO. Does not listen on :6432.

Native PgBouncer binary / Unix socket / auth_file leftover EXTERNAL.

safety

4. Enterprise safety & reliability

Buyers pick safety over speed. Six controls leftover-honest.

analog

ACID across both engines?

SQL path: committed tx under configured isolation + shared WAL/LSN analog. testdb HA preserves committed prefix. We refuse the sentence “fully ACID-compliant database” and “ISAM path is fully ACID-equivalent.”

Native fsync durability SLA leftover EXTERNAL. Doublewrite buffer leftover EXTERNAL. ISAM is not claimed ACID-equivalent.

testdbHaSelftest 15/15 PASS · ledgerAnalogSelftest 64/64 PASS

analog

Power loss mid-write / fractured pages?

Hash-journal is a prev-hash chain + merkle-v0 on WAL frames. HMAC page MAC analog. Crash-primary keeps committed LSN on standby (testdb-ha/0). Workbench durability is OPFS, not an fsync on NVMe.

InnoDB doublewrite leftover EXTERNAL. µs SLA banned.

analog

Hot backup without stopping ingest?

LOCAL_DIGEST export + detached veloce-inclusion/0. Two JSON files. VERIFY in the tab. Digest babysitter is a calendar reminder, not a backup.

Blob lifecycle leftover EXTERNAL. Never advertise VERIFY as backup.

analog

RBAC, AD/LDAP, TLS 1.3?

RBAC roles viewer/dba/security/admin LIVE as analog. Tenant JWT HS256. TLS 1.3 transcript analog + SCRAM-SHA-256. HITL consume-separate. DLP on EXPORT/SHARE. SHOW SECURITY.

AD/LDAP leftover EXTERNAL. Duo/Okta/WebAuthn leftover EXTERNAL. CrowdStrike / 3PAO / SOC 2 letter leftover EXTERNAL.

POSTURE_CONTROLS 5 LIVE + 1 leftover (pen-test letter)

gtm

5. Market positioning & commercial strategy

Technical superiority does not mint ARR. Honesty is the close.

live

Why not Redis + Postgres, free?

We do not replace redis-server. We replace the afternoon of stitching. Closable kernel, no region, leftover named. If a 2-second warehouse delay is fine, they should take the free stitch. Our buyer cannot.

“We replace redis-server” is a refuse.

live

Who pays for 0ms sync?

Vacuum (QLDB died), Meter (core-pack letter), Close (no region), Successor (keyed-file workgroup analog). We analog the job. We do not claim another vendor's OEM wins.

74-domain TAM refused. Blockchain refused.

live

Legacy rescue vs greenfield?

Primary invert is Successor + Meter + Vacuum. Greenfield Speak-as-H1 is their gravity, not ours. Speak stays a door.

Drop-in binary rescue refused.

dx

6. Developer experience

Fifteen minutes or they leave.

analog

Are ISAM APIs modern async or 1990s pointers?

In-tab SQL + ISAM verbs. veloce-stdio/0 envelopes, not C pointers. Muscle memory 12 keys. Recipes stay 30.

Native keyed-file ISAM C API leftover EXTERNAL.

analog

Unified debugger / EXPLAIN?

EXPLAIN reader desk highlights Seq Scan in pasted plans. We do not run EXPLAIN. SHOW spine teaches. Aevum floor is the named room, bounded tape.

Cost-based optimizer with live histograms leftover EXTERNAL as a sold planner.

live

One-command local install?

Open /tools for free Workbench desks. Paid engine installers ship from /download after purchase. 30-day trial key already exists for production.

brew install / native installer leftover EXTERNAL. Downloads page says so.

license

7. Pricing & licensing

Single process is the commercial shape: one unit, not a core pack.

live

Per core, per user, or per instance?

Per workgroup. 5-user Standard $999, unlimited Standard $3,499, Enterprise $9,999. Client Toolkit $199 is not a CAL. Workbench tools are free and not a SKU. We do not sell CALs.

Core-pack / NUP / AHB slogans refused. SHOW METER is a worksheet, not a quote.

samMeterSelftest 34/34 PASS

analog

OEM embed without wrecking ISV margins?

The unit price is the OEM conversation. We do not have a published OEM SKU this cut.

OEM contract leftover EXTERNAL.

leftover

AWS/Azure marketplace pay-as-you-go?

No. Region as default is the trap we invert. Stripe Checkout leftover if secret missing.

Cloud marketplace leftover EXTERNAL.

live

Free Workbench to seed adoption?

Yes. In-browser, OPFS, we do not host their kernel. testdb HA and journal stay paid. Owner chrome hidden.

Workbench is not a hosted free tier on our servers.

bench

8. Benchmarking

Theater is a refuse. Honest benches only.

no

TPC-C / TPC-H vs Postgres / SQL Server?

No official TPC publication. prove-bench analogs exist (Dragonfly/Garnet/QuestDB ideas, not copies). Snowflake elasticity analog never a local TPC-H claim. veloce.prodgen.bench shares a 17-row honest pack. Peers never dialed. SQLite is not a network server.

TPC-C/H leftover EXTERNAL. Stars-as-job refused.

no

100k ISAM inserts/sec + 500 SQL queries whitepaper?

Measured as analog on this origin. The recoded stress battery (Benchmarks tab + download zip) times mixed ISAM insert vs SQL aggregate, WAL crash-replay, and SERIALIZABLE vs ISAM overwrite. Analog ops/s is not a 50k/sec letter and not TPC.

Do not invent ops/s. Native C++/Rust / kill -9 leftover EXTERNAL.

stressAnalogSelftest + runStressBattery analog

schema-tx

9. SQL↔ISAM schema mechanics

Same DDF is the point. Schema drift is the trap.

no

ALTER TABLE reflected on ISAM immediately?

Same tenant CMM/DDF analog: SQL CREATE TABLE and ISAM Insert share findSchema. The compiler does not run ALTER TABLE onto ISAM pages. Schema roast / ERD / diff desks are static helpers, not Flyway.

Zero-downtime dual-engine ALTER leftover EXTERNAL. Do not advertise schema-evolve-ISAM.

analog

Unstructured ISAM blob → SQL columns?

JSON → DDL desk infers a first-pass table. Types are guesses. Review before you run it.

Magic schema-on-write leftover EXTERNAL.

analog

Does SQL use the ISAM index?

One kernel, one DDF is the architecture claim. Index advisor desk is heuristic on SQL text, not a cost model. We will not tick “shared B-tree proven.”

Index asymmetry is named as a gotcha we analog, not a certified fix.

ha

10–12. HA, DR, edge-to-cloud

testdb HA is LIVE as an analog. Always On is a refuse.

analog

Active-active / failover latency / split-brain?

testdb-ha/0: one primary + one standby in this process. WAL ship on mutate. Standby reads committed prefix. FAILOVER TESTDB stages a token; CONFIRM flips; chat text is not authority. Crash-primary keeps committed LSN. Enterprise $9,999. Workbench does not run testdb HA.

Always On / WSFC / RAC / native TCP 1584 replica wire leftover EXTERNAL. Active-active multi-server leftover EXTERNAL.

testdbHaSelftest 15/15 PASS

leftover

Point-in-time recovery to a microsecond?

Journal LSNs and SHOW INCLUSION for a frame. Not PITR to 2:14:03.112. Digest export is the offline proof.

PITR leftover EXTERNAL. S3 log shipping leftover EXTERNAL.

leftover

Hundreds of edge nodes rolling up / CRDTs?

Workgroup cord exists. CRDT mentions are hardener leftovers, not a sold conflict-free type. Last-Write-Wins across clock-skewed edge nodes is a named gotcha we do not pretend to have solved as a product.

CRDT / hierarchical replication leftover EXTERNAL.

gotchas

Gotchas — can 2.73.13 mitigate and still work?

Yes as analogs in one process, with named leftover. No as native InnoDB/Postgres/Always On. The kernel still COMMITs Workbench work.

mitigated

SQL starvation under endless ISAM writes

Isolation analog + HITL on destructive verbs + default SERIALIZABLE. Not a proven fair scheduler under 50k/sec. Workbench workloads in the tab are human-paced.

Fair lock scheduler leftover EXTERNAL.

isolationSelftest 11/11

mitigated

Phantom reads / schema drift mid-scan

ISOLATION_PROBE phantom named. SERIALIZABLE refuses write-skew. SNAPSHOT allows it and we say so. Analog of snapshot isolation, not native SI.

Native SI leftover EXTERNAL.

leftover

Lock escalation freeze

No measured row-lock table that escalates to a table lock. Tenant fence is the hard wall. We do not tick this as solved.

Lock-escalation manager leftover EXTERNAL.

analog

Dual-engine cache pollution

Tape ring bounds the live UI. Buffer-pool isolation between SQL scan and ISAM hot pages is not a sold knob.

Split buffer pools leftover EXTERNAL.

analog

Fractured pages on power loss

WAL + prev-hash + merkle-v0 + testdb committed prefix. OPFS is the Workbench disk. Doublewrite buffer leftover.

InnoDB doublewrite leftover EXTERNAL.

ledger 64/64 · testdb-ha 15/15

mitigated

Raw pointer / alignment corruption

No C pointers in the Workbench path. JS/TS kernel. ISAM analog is not mmap. That specific segfault class does not exist in the tab.

Native mmap / musl leftover EXTERNAL.

leftover

Blind cost optimizer on stale stats

No CBO product. EXPLAIN reader is paste-the-plan. Index advisor is tokens.

Live histograms leftover EXTERNAL.

analog

Index asymmetry (ISAM index invisible to SQL)

Same DDF is the architecture. We do not print a certified shared-index proof. Schema desks are honest helpers.

Certified shared B-tree leftover EXTERNAL.

mitigated

Dual-stream WAL desync SQL vs ISAM

One interceptor on the same kernel. Hash-journal is optional on that WAL. Journal does not replace Raft. testdb HA ships the same frames to standby.

Two-log architecture refused.

ledgerAnalogSelftest 64/64

analog

WAL write amplification / NVMe killer

Workbench is a tab. fsync storms are a native-binary problem we do not currently sell as a host CLI. When a host CLI exists, this leftover returns.

Host fsync path leftover EXTERNAL.

leftover

Edge split-brain / clock skew LWW

Named. Not solved as CRDTs. testdb HA is in-process, not a partitioned WAN.

CRDT / WAN active-active leftover EXTERNAL.

leftover

Distributed lock cascades

We do not sell multi-node distributed locks. Raft analog + VSR lab are labs. Helm operator leftover.

Distributed lock service leftover EXTERNAL.

analog

Memory fragmentation / OOM killer

Tape ring + 96 KB session cap + wasm heap analogs. Tab can still die if the user pastes a 2 GB dump — desks cap (2 MB preview, 80 MB hop).

Process cgroup leftover EXTERNAL.

tapeRingSelftest PASS · hop leftover named

leftover

Stop-the-world MVCC cleanup

No long-lived row-version GC as a product thread. Isolation analog does not keep a 50 GB snapshot.

MVCC vacuum leftover EXTERNAL.

Still works

Dual-engine SQL + ISAM still COMMITs. testdb HA still ships WAL to a standby on Enterprise / trial. VERIFY still passes Acme and fails a tamper. The traps we cannot tick stay leftover — that is how the kernel keeps working instead of lying.