Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1w3LOr-0018BX-2S for pgsql-hackers@arkaria.postgresql.org; Thu, 19 Mar 2026 21:59:29 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1w3LOp-0034ia-13 for pgsql-hackers@arkaria.postgresql.org; Thu, 19 Mar 2026 21:59:27 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1w3LOo-0034iR-3B for pgsql-hackers@lists.postgresql.org; Thu, 19 Mar 2026 21:59:27 +0000 Received: from mail-qk1-x735.google.com ([2607:f8b0:4864:20::735]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.98.2) (envelope-from ) id 1w3LOh-000000004Gv-46CH for pgsql-hackers@postgresql.org; Thu, 19 Mar 2026 21:59:20 +0000 Received: by mail-qk1-x735.google.com with SMTP id af79cd13be357-8cd90401034so141799485a.0 for ; Thu, 19 Mar 2026 14:59:19 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1773957559; cv=none; d=google.com; s=arc-20240605; b=ASfM2xmRHKQnKHgCmcMXahWySlLqRaGa6EQMMT5DkLLpRsb6ewrD7Sq7rzjMtZeDzj p9MUPDHPBn7t5eAFqi6yoqxc7D7Tc8/sEKjIlsluFKyAUbcmjiamjZ5y3z6oGcp4d1Ur vKszKtD153I/R2CJVNJt68sMV9OPSloxjvNiczK3kiOGBVGJcVV5LTBXCRfVWOfoX7M8 eQ225Qhio3vY324zHmmfWl5gq4WBvnRENAOAgaZlZVBzs5UkcuyHOK0FzPvK2L23xRjx QFhw7x9BiGnu4xZe39/6jZ+iiDFz9bRAbg40s//TLk348Ob3Awhx++CIO/46KsqSv7T2 C8lw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=3iS1P2kxAKeCw4J2vbtyFpTa031JE5Baq0hqYLgXzrw=; fh=mmT42vVY0gdJjk3I8y8vRacEBZCpoNfj3L0YqWBHwCg=; b=YfWYpQVKpT7AiLR1+bAS/lZ3DbnKNJSqQNAdDpdbw010hq+RIbsLe6It7aUDHoD2m/ IY9G5Rh9v2mxqJWaM9xGVUrY+3MNS2UbKBejbvnJ5LyfKpeGlHm8Cm6EIlkvSomYI4aq Cq+BgEuyPkIM2I+B6MfH67Xhuh8ZRJHn2Fxg3uiUAFfjXsdkL4xr+t1RpmfzFnLlbHJl zInf0N4C0p8Lba0d8wO05cMM6SKF2Gngll5F/N3ReoLEzsqbD6z2XV9Gf9Ceu6FsRqyf /x6LJ9Vb9ck0rNwn//CgKkDHBDkNFd4SwjOaU7+mzlF4KCc7NcHxtwstufHD5utdsX6R AGIw==; darn=postgresql.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=enterprisedb.com; s=google; t=1773957559; x=1774562359; darn=postgresql.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=3iS1P2kxAKeCw4J2vbtyFpTa031JE5Baq0hqYLgXzrw=; b=R+aBMjI2VFA1VUnKWe34f608Q5YL+eDk899AHHHBf0ietTmqkHkIp73YSd22fxmub/ yNiTLVfIvCUSZWs4+CXrGKSrnSpg4z4NvpTFcA5Vd2hOz0PWPRAy6yEImAbaEyEJDHx3 HPOQqZ7IDIFSCuHeAZTW8sMF66lFzmXf96hgR4kHgFfG9jkaA6aRkDoOF6CLM23WqVQy HhDtIHTe0HI/vs2IzowPq1lz91zm+z+IA2PpUM3HODuITMEmDrqCx4Wz2xSu4PMmADcX C4/n75sCaKmqISxxWPyC9jnqHyGqaJXZqxyl8K/H5OX/e3kC5u4b1xJ/ePaNOh/bHquz 2JLg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1773957559; x=1774562359; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=3iS1P2kxAKeCw4J2vbtyFpTa031JE5Baq0hqYLgXzrw=; b=XNyJsK9zIo8a83FcMQF4UvnaPTINVR+eu/CMguBzV8B9XV3TwnpOuSixj7jW+9g3Br YxH5wEdSgX/iVESRvvsG9sdseNqTW8xwO0laPdL1gH7RJw3mH6ZRvuYIyNwNHokWiwWY nVptKaQZgMdtfN7Vfx67LLN6/+vft5+j9O+7djw4sI9BTBCIn3feLW/BxK4MPZuQFXY1 we8haKn4ar/szLgizZJKZptqKBxpsV4gYk8TgutZpi0JDhcPEg6+KXYzvte/hkbC+eVD cFewlxhimUvTHlCRwBtFCztrA/BOGzvjDhaXg3NW536UBqMCCVt8L8oKBztgINJrXfEO dUwg== X-Forwarded-Encrypted: i=1; AJvYcCVo0YP9YhPXPdT02x8LEcVRPQ25HgeDDMhwKKCQgJjpzyz2OvZC91KuoDtaLCk3sMg3iPIrZAnZ7u9ol/ch@postgresql.org X-Gm-Message-State: AOJu0YyD1E5qaSZ7FumqMHxdvCQ+cknL1/KHEddoaTVcgiBOywfc6wDC yfot/2MtoNchCTbQPB4KqjNCvfg0F3Qi2vlHfTT8CrY68gHyv+qtGS5y1mZnG/sFwtd6XmepTNx J41/KlhmEugEnTIMW3K8lV+R4JZH5/x9ei+lUlJEd X-Gm-Gg: ATEYQzz7ECLNacySd7MsLbuPPcIv+n1CxBNcN05eHGdXvJVDNyuRDFrPK7JmuSDFbig Ivj0W+eJuXwBPaYbhR1XuHMrUaWSMgQKkSQL6/EOEhGsYUPGLW9ATOEYythP7Ue3OeaAEWXpV2X QmBLVGPh5+DzPMUpRk6rCpvIyerxFcjFJ1c9xIUNIRLNGEtFtSCB5aD5ONj2VNrvVsXtRxgNi9E NeQRXHDpDerubTL86U5Pehn8fI1Ou/zahdsWIpAPnZY7/N7ZD1FyIJSISwKBujjQbkuxIx0a5hD 9zAir71Wmg== X-Received: by 2002:a05:620a:4049:b0:8cd:c239:12d6 with SMTP id af79cd13be357-8cfc7f7dbeamr134596385a.57.1773957559026; Thu, 19 Mar 2026 14:59:19 -0700 (PDT) MIME-Version: 1.0 References: <64f1c69a-ceff-4b17-8298-58f255d075fc@gmail.com> <485a95a4-3220-4165-8be2-9508afd6a0b1@gmail.com> In-Reply-To: From: Jacob Champion Date: Thu, 19 Mar 2026 14:59:07 -0700 X-Gm-Features: AaiRm53ZMW0EGpvqeT2Mhgms56U0tUGsA5vQdrHSAkeim4OnThSGKfGANd1UJFM Message-ID: Subject: Re: Read-only connection mode for AI workflows. To: SATYANARAYANA NARLAPURAM Cc: Andrei Lepikhov , Andres Freund , Peter Eisentraut , Bruce Momjian , Jack Bonatakis , pgsql-hackers Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Thu, Mar 19, 2026 at 12:39=E2=80=AFPM SATYANARAYANA NARLAPURAM wrote: > +1 to scenarios Andres' mentioned. Additional cases where a cluster=E2=80= =91wide setting is helpful include disk=E2=80=91full events and policy enfo= rcement, where write access is revoked but read access is preserved for dat= a exfiltration. I've additionally wanted this during orchestrated pg_upgrade scenarios, to apply to the old cluster. --Jacob