Marketplace & Distribution Playbook

Last updated: 2026-08-10

Phase 1 — GitHub excellence (done in 0.1.0)

  • [x] README with clear problem, quick start, architecture
  • [x] PostgreSQL License
  • [x] CONTRIBUTING, CODE_OF_CONDUCT, SECURITY, SUPPORT, AUTHORS, Changes
  • [x] META.json (PGXN Meta Spec 1.0)
  • [x] Examples + research docs + ADRs
  • [x] CI skeleton

Phase 2 — Stabilize API

  • Freeze evaluate JSON shape
  • Add expected regress outputs and PG matrix CI
  • Security review of SECURITY DEFINER (none in v0.1 by design)

Phase 3 — PGXN publish

  1. Create account on https://manager.pgxn.org/
  2. git archive or zip distribution with META.json at root
  3. Upload release; verify search indexing of README/docs
  4. Announce on pgsql-announce / Discord / LinkedIn with “RLS is not enough for agents” narrative

Phase 4 — Managed clouds

Target Action
Neon Extension request + Discord; emphasize SQL-only safety
Supabase Extension request; agent-focused positioning
RDS/Aurora Long review; may need AWS partner path; consider pg_tle packaging experiment
Crunchy / Aiven / Timescale Vendor conversations after PGXN traction
CloudNativePG OCI trunk once PGXN v2 tooling ready

Phase 5 — Ecosystem

  • AuthZEN HTTP adapter (optional companion repo)
  • MCP reference middleware calling pg_policy.evaluate
  • Policy pack gallery (fintech, healthcare, support bots)