What V0 does not do

These limits follow the repository at commit 6580fdf. The source remains authoritative.

No signatures or verified identity

Events carry ASSERTED_UNVERIFIED. A decision evaluates claims in the supplied log; it does not prove the identity behind them.

No production-scale performance claim

The storage implementation favors correctness and has not been benchmarked or operated at production scale.

No database-enforced append-only journal

The provided API is append-only. A privileged raw SQL writer can still mutate the underlying PostgreSQL rows.

Budget TOCTOU is detected after the fact

Concurrent authorized decisions can overspend a shared budget. V0 reports the inconsistency after execution; it has no reservation primitive to prevent it.