Release identity
SHA-256 of the pack file bytes: 8beaa63d3a799705bfd7ef1ec4aa5479e27edb005b749f6ccaabbdf40a040f08
Distributable: digest matches the release manifest. The binary carries a digest-bound manifest of the distributable library; a pack whose bytes differ from its manifest entry — endpoint, tier, allowlist, or credential edited, with provider, version, and review block preserved — fails the digest check, loses distributability, and renders MODIFIED rather than as the shipped reviewed artifact. Review state and artifact status are different facts: the first is a documentation-review declaration, the second is the identity of the exact bytes.
Capabilities (6)
postgres.invoices.query v1.0.0R0
- Action
- read
- Endpoint
query postgres://DB_HOST:5432/DB_NAME- Connector
- sql
- Custody
- customer_vault
- Credential ref
secret-ref-postgres-role- Data class
- internal
Run an allowlisted SELECT against the invoices table. DB_HOST and DB_NAME are placeholders.
postgres.customers.query v1.0.0R0
- Action
- read
- Endpoint
query postgres://DB_HOST:5432/DB_NAME- Connector
- sql
- Custody
- customer_vault
- Credential ref
secret-ref-postgres-role- Data class
- pii
Run an allowlisted SELECT against the clients table, which holds personal data.
postgres.audit_log.query v1.0.0R0
- Action
- read
- Endpoint
query postgres://DB_HOST:5432/DB_NAME- Connector
- sql
- Custody
- customer_vault
- Credential ref
secret-ref-postgres-role- Data class
- internal
Run an allowlisted SELECT against the audit_log table.
postgres.row.insert v1.0.0R2
- Action
- create
- Endpoint
exec postgres://DB_HOST:5432/DB_NAME- Connector
- sql
- Custody
- customer_vault
- Credential ref
secret-ref-postgres-role- Data class
- internal
Run an allowlisted INSERT against the invoices table. The adapter must permit the exact statement; this capability promises the operation, not the statement.
postgres.row.update v1.0.0R2
- Action
- update
- Endpoint
exec postgres://DB_HOST:5432/DB_NAME- Connector
- sql
- Custody
- customer_vault
- Credential ref
secret-ref-postgres-role- Data class
- internal
Run an allowlisted UPDATE against the invoices table. A write against financial records at R2, the update verb's floor: governed, but a floor is a lower bound — an UPDATE can be irreversible in effect.
postgres.row.delete v1.0.0R3
- Action
- delete
- Endpoint
exec postgres://DB_HOST:5432/DB_NAME- Connector
- sql
- Custody
- customer_vault
- Credential ref
secret-ref-postgres-role- Data class
- internal
Run an allowlisted DELETE against the invoices table. Delete is one of the IRREVERSIBLE ACTIONS (delete, send, pay, deploy, approve, share and transfer), so the operator approval gate applies. An irreversible action cannot be taken without a person, and no policy can configure that away.
Credential reference
The pack names a reference, never a secret. Installing a pack registers capabilities and makes them governable; registration is not connectivity. The credential is created at the provider and held in the client's own secret manager under the reference the pack names, and deployment testing is still required to show the credential path works and cannot be bypassed.
- Reference
secret-ref-postgres-role- Custody
- customer_vault
- Injection
- header (Authorization)
A dedicated least-privilege database role held in the client's own secret manager. The SQL adapter presents the resolved material to the database as its rail requires, and never interpolates it into a statement. The role's GRANTs, and the driver's statement allowlist, are the two things to review before enabling.
Resources
postgres-invoices(table, internal):postgres://DB_HOST:5432/DB_NAME/public.invoicespostgres-customers(table, pii):postgres://DB_HOST:5432/DB_NAME/public.customerspostgres-audit-log(table, internal):postgres://DB_HOST:5432/DB_NAME/public.audit_log
Pack notes and exclusions
Reads run at R0; a write is registered at R2 and a delete at R3 with the operator approval gate an IRREVERSIBLE ACTION requires: delete, send, pay, deploy, approve, share and transfer are IRREVERSIBLE ACTIONS. The METHOD is the SQL connector's own operation vocabulary ('query' or 'exec'), not an HTTP verb: the connector owns that vocabulary and refuses an operation outside it, while the domain layer only requires that an operation be registered. The statement allowlist lives with the driver adapter the deployment wires, not in this pack: a capability is registered with the operation, and the adapter permits exact statements. Review the role's GRANTs and the adapter's allowlist before enabling a write, because a capability named 'row.insert' is a promise about the statement the adapter will permit, not a check that this pack can make.
Review record
Review completed: 2026-09-20 · Reviewer: aaes-eng (an opaque id that resolves internally to the responsible reviewer)
- https://www.postgresql.org/docs/current/protocol-overview.html (retrieved 2026-09-20)
- https://www.postgresql.org/docs/current/protocol-flow.html (retrieved 2026-09-20)
A pack review is not a vendor or examiner attestation. A retrieval date says when a source page was read; it does not by itself establish what the page said then. No pack is vendor-endorsed, and none has been connectivity-tested against a live vendor tenant.