Regional blue origins
Immutable puts, appends, OR-set operations, PN components, and deny generations commit locally when their invariants are proven confluent.
CALM-native private beta
Coordinate the predicate, not the database.
Blue facts commit at admitted regional siblings. Red predicates route to one conflict-key owner. Reads tell you exactly which origin frontier they have observed.
coordination.policy sfdb-v2
blue = ACI
&& inflationary
&& duplicate_safe
&& invariant_confluent
red = order
|| uniqueness
|| exact_absence
|| unknown_invariantWrite plane
Active-active where merge is the proof.
The schema compiler fails closed. A CRDT name is not enough; application invariants must remain valid under merge.
Scoped red owners
Uniqueness, alias binding, LWW order, global idempotency, schema activation, and map publication serialize only their conflict key.
Verbatim replication
Every origin has a contiguous sequence, hash chain, signature, and causal frontier. Replicas import envelopes without re-minting them.
Capability + policyTenant, scopes, generations, blue/red evidence
→
Authority Durable ObjectAtomic SQLite state, sequence, HLC, log, outbox
→
Reactive materializationR2 repair + Queue acceleration + vector frontiers
Read plane
No fake synchrony.
A commit returns a minimal vector bookmark. A view serves only when its per-origin frontier dominates the token, otherwise it catches up, source-routes, or reports lag.
Absence as of a frontier
Open-epoch misses are never presented as universal negatives. Exact absence requires a sealed, verified checkpoint cut.
Integrity stops; availability degrades
Transport lag may retry or source-route. Gaps, divergent duplicates, bad signatures, and broken chains quarantine the affected origin.
Scale
Memory is a cache, not capacity.
Shard ownership, graph gluing, R2 LSM runs, Merkle checkpoints, vector sidecars, shape projections, and Parquet analytics keep graph size independent of isolate RAM.
Subgraphs plus gluing
Each shard carries owned atoms, ghosts, boundaries, attachments, and peer evidence. The global graph is their glued union.
R2 capacity
Adaptive WAL/L0 bundles, immutable SSTs, compact roots, partial hydration, and verified recovery.
Disposable projections
Hybrid retrieval, SQL shapes, dashboards, and analytics are watermarked, rebuildable derivatives—not authority.
Evidence before claims
Implemented core. Explicit release phases.
The package includes deployable Worker/Durable Object code and passing local conformance suites. It does not claim a live deployment, measured SLO, full LSM, or complete erasure workflow.