Database

Database Readiness

WarpIntel uses a protected Neon and Drizzle storage lane for accounts, EVE identity metadata, manual intake, rate limits, audit events, and future account reports. This page shows aggregate readiness only, without connection strings, SQL bodies, row contents, token ciphertext, account exports, or private EVE data.

ProviderNeon Postgres

Production storage is designed around a dedicated WarpIntel Neon Postgres project.

Schema Tables19

Account, EVE identity, intake, traffic, rate-limit, audit, and settings tables are mapped.

Migrations25

Drizzle migration count is tracked without exposing migration names or SQL bodies.

Runtime BoundaryReady

Connection values, row data, and restore actions stay outside public output.

Manual Intake6

Support, SRP, access, recruitment, buyback, and mining queues are mapped to protected persistence.

Rate Limits2

Analyzer and manual-intake policy coverage is staged with safe fallback behavior.

Account Reports17

Account-save capable tools remain sign-in gated while local exports stay available.

Activation Criteria7/7

Storage activation is documented through public-safe criteria and protected owner review.

4Table groups
10Status enums
6Workflow stages
6Runtime checks
5 tables

Account And EVE Identity

Signed-in account, character, token metadata, membership, and saved-report storage stay protected.

4 tables

Public Traffic And Rate Limits

Public analytics, workflow clicks, tool runs, and rate-limit events use hashed or aggregate metadata only.

6 tables

Manual Intake Queues

Public forms can collect requests for protected human review without exposing queue rows publicly.

4 tables

Operations And Settings

Ops, service health, audit, and app setting records remain admin-only and no-store.

Workflow

Browser-Local First

Public tools can save local reports in the visitor browser before account storage is enabled.

Workflow

Manual Intake Persistence

Support, SRP, access, recruitment, buyback, and mining forms require protected database writes.

Workflow

Account Report Storage

Signed-in account reports require EVE SSO, private no-store responses, and protected account controls.

Workflow

Rate Limit And Abuse Guard

Analyzer and manual-intake abuse controls use hashed identity records when the database is available.

Workflow

Audit And Review

Admin decisions, service checks, and audit events stay behind protected routes and sanitized exports.

Workflow

Backup And Recovery

Neon restore drills stay owner-reviewed and separated from public readiness checks.

3600s window

Public Tool Analyzer

Limit 30; evidence is stored as aggregate policy status while raw visitor identity stays excluded. Use local deterministic analysis when database-backed enforcement is unavailable.

3600s window

Manual Intake Routes

Limit 8; evidence is stored as aggregate policy status while raw visitor identity stays excluded. Keep request submission guarded and fail closed when protected persistence is unavailable.

Ready

Schema surface documented

Public manifest exposes table-group and enum counts without row contents or SQL bodies.

Ready

Migration ledger counted

Drizzle migration count is available for readiness without publishing migration names.

Ready

Manual intake routes covered

Six public intake routes are mapped to protected persistence and rate-limit policy.

Ready

Rate-limit fallback ready

Public tools fall back safely when database-backed rate limiting is unavailable.

Ready

Account report boundary ready

Account reports require sign-in and private responses while browser-local exports remain available.

Ready

Backup readiness linked

Database recovery evidence links to backup readiness without exposing provider artifacts.

Ready

Secret and row exclusion

Connection strings, SQL dumps, row data, token ciphertext, and private account records are excluded.

No-Secret Database Rule

Public database readiness exposes aggregate schema counts, table-group labels, migration counts, workflow-stage counts, rate-limit policy counts, account-report coverage counts, backup-readiness counts, and no-secret boundary booleans only; it does not expose connection strings, database passwords, SQL bodies, migration names, row contents, token ciphertext, private EVE data, account exports, raw submissions, raw logs, provider-console artifacts, or separate-project account details.