Postgres wire protocol
Self-hosted servers accept psql and Postgres drivers on port 5432 (with known gaps). Not on Cloud yet, and most ORMs don't work yet.
ACID + MVCC snapshot isolation
Transactions with snapshot isolation, not eventual consistency.
Streaming engine (experimental)
Kafka + Kinesis sources and sinks. Windows. ASOF joins. Watermarks. In-process.
Continuous materialized views
Streaming MVs that update as data arrives. The Materialize feature, without the separate cluster.
Change Data Capture
An event stream of every row change. Webhooks. Cursor checkpointing. Replay. A destination that falls far behind can miss changes.
Time travel + SCD-2 (known gaps)
Query a past point in time, with built-in slowly-changing-dimension history. After compaction, older points can return wrong results; see known limits.
Cluster + replication (experimental)
Leader election with epoch fencing and WAL replication. Self-hosted only; not offered on Cloud.
S3 storage offload
Hot WAL + catalog stay local. Cold SSTs land in S3 (or any S3-compatible store).
Built-in RBAC + JWT + API keys
Roles, permissions, token TTL, brute-force lockout, password policy. No external IdP required.
Audit log
An append-only NDJSON record of who did what. Its hash chain can't be verified yet.
GDPR erasure
gdpr erase finds and removes a person's rows across tables by column value. Self-hosted only for now.
Encryption at rest
AES-256-GCM on self-hosted servers. Cloud workspaces use storage-level encryption for now.