Real Postgres, not mocked tables.

Overall: agents need durable state without sharing a leaky multitenant pool. This product: dedicated Postgres leases with TCP :5432 and conductor-managed backups—no “mock SQL over REST” games.

backup choreography · illustrative spacing

Conductors periodically execute pg_dump, encrypt with tenant-derived keys, publish ciphertext to Walrus, and reconcile metadata for restores after lease churn.

Separate deployments per DB isolation requirement
Skip-in-flight backup guards on long-running dumps
DSN visibility redacted except at creation-time

psql postgres://USER:PWD@tenant.db.claws.internal:5432/app

connection string illustrative · never commit secrets