1-23 of 23 found
Security
Management authorization API Admin bearer tokens (SHA-256 fingerprints, constant-time check).Tamper resistance core AEAD authentication tag; AAD binds ciphertext to name:version.
Threat model
Spoofing an admin High-entropy bearer tokens; only SHA-256 fingerprints stored; constant-time check; revocation.Tampering with stored ciphertext AEAD tag fails open; AAD binds ciphertext to…
pgmnemo Scientific-Technical Release Process
json, pinned SHA) recall@5/10/25/50, MRR, per-category Run full 1982+ questions, not sampledLongMemEval-S xiaowu0162/longmemeval-cleaned (longmemeval_s_cleaned.
pgmnemo — Strategic Charter
… gate on writes none provenance gate — write requires commit SHA or artifact hashMulti-agent role isolation RLS or none first-class — role + project + provenance compositeVendor lock-in yes (data…
pgmnemo Usage Guide
… Examples -- Minimal: text-only lesson with provenance via commit SHA SELECT pgmnemo.ingest( 'developer', 1, 'security', 'Rotate JWT secrets within 24 hours of any key-compromise indicator.
pgmnemo — POSITIONING v0.1
… gate Yes — lesson write blocked without commit SHA or artifact hash No No No No NoMulti-agent role isolation Yes — PostgreSQL RLS per agent role + project composite API-level only (no DB…
pgmnemo — Tactical Plan, Month 1
00W3.3 Provenance gate trigger — verify commit SHA / artifact hash before promotion backend_developer (70) $4.00W3.4 Demo case 1: Claude Code agent reading from pgmnemo (script + README)…
Design decisions
The default posture is deny. 8. Admin tokens stored as SHA-256 fingerprints, compared in constant time Decision. Generate 256-bit random tokens; store only sha256(token); verify with a constant-time…
REPORT_PGWIRE_PROXY.md — pgwire Proxy / Intercept Analysis
Handle startup, auth (cleartext, MD5, SCRAM-SHA-256), simple query, extended query, COPY, cancel, notifications. Client (backend): Connect to upstream PG. Same protocol coverage.
pg_uuid_v8
… Available Algorithms XOR (default): XOR-based obfuscation with SHA-256 key derivation from seed AES128: AES-128 encryption in ECB mode for cryptographically secure timestamp protection AES256…
REST API
… "payment" } 201 Created → the raw token, shown once (only its SHA-256 is stored): { "name": "payments-svc", "role": "payment", "token": "f3q...
PgClone Manual Testing Guide
… Installed + preloaded Installed + preloadedAuth scram-sha-256 scram-sha-256Connection string used throughout: host=172.17.0.2 port=5432 dbname=db1 user=postgres password=123654 All SQL commands run…
Contributing to Citus
… the commit that you want to backport git cherry-pick -x <sha> (the -x is important) Push the branch git push Wait for tests to pass If the cherry-pick required non-trivial merge conflicts, create a…
Appendix E. Veil2 Authentication Protocols
Create a sha-1 hash of the concatenated string. Encode the hash as a base64 string. The open_connection() function will create the same encoded hash internally and check that it matches.
Release Process
zip Extension files for Windows x64SHA256SUMS.txt SHA-256 checksums for all archivesghcr.io/grove/pg_trickle-ext:<ver> CNPG extension image for Image Volumes (amd64 + arm64)Installing from an archive…
PLAN: SQL Gaps — Phase 5
… ordinal} at creation timeschema_fingerprint TEXT SHA-256 of serialized column snapshot — fast equality checkOn each DDL event, compare the current pg_attribute state against the stored snapshot.
Plan: Architecture Decision Records
… key matching (no extra column, but complex MERGE logic) - MD5/SHA hash (cryptographically stronger but slower) Key points: - 8 bytes vs 16 bytes per row (significant at scale) - Collision…
Plan: dbt Integration via Custom Materialization Macro
git" revision: v0.1.0 # git tag, branch, or commit SHA subdirectory: "dbt-pgtrickle" Then run: dbt deps # clones pg-trickle repo, installs only dbt-pgtrickle/ subfolder Note: dbt deps performs a…
pgsodium
… will always have the same fingerprint, similar to the MD5 or SHA-1 functions for which crypto_generichash() is a faster and more secure alternative. But a key can also be specified.
Benchmarks
Miss schedule is deterministic per-query via SHA-256 hash (seed=42). Local, 200K pairs x 5 hops, 64D, 8 shards, 32 queries, 3 runs, ann_k=256, top_k=32, ef_search=128, m=16, ef_construction=64…
PostgreSQL Partition Manager Extension (pg_partman)
Uses pg_dump, creates a SHA-512 hash file of the dump file, and then drops the table. When combined with the retention_schema configuration option, provides a way to reliably dump out tables that…
SQL Reference
… at creation timeschema_fingerprint text SHA-256 fingerprint of column snapshot for fast equality checkscdc_mode text Current CDC mode: TRIGGER, TRANSITIONING, or WALslot_name text Replication slot…
CHANGELOG-pre-5.0.0
… dump any tables found in a given schema using pg_dump, create a SHA-512 hash of the dumped file and then drop the table from the database.