Everything AthenaDB is designed to do

AthenaDB owns its storage format and cryptographic implementation rather than embedding another database.

• Write-ahead logging, B-tree indexes, snapshots, and integrity checks
• Backup, restore, compact, repair, and customer-data export
• One engine across embedded Lite and networked Server

Durable multi-statement writes with an ordered commit model and explicit completion outcomes.

• Atomic commit or rollback
• Crash recovery through the WAL
• Multi-session and multi-socket concurrency work in progress

Operational tooling keeps the customer in control of database files and recoverability.

• Own-data export remains available independent of premium licensing
• Copy-based format downgrade and migration safeguards
• Integrity validation before and after movement

Per-page authenticated encryption protects databases, with wrapped data keys and pluggable custody.

• Authenticated encryption with tamper detection
• OS keystore, Athena Vault/HSM, and PKCS#11 custody paths
• Keys handled through locked-memory and non-exporting provider seams

Planned two-custodian access control requires both the service key path and the customer’s external KMS/HSM authorization.

• Customer retains an independent key-control path
• Revocation blocks future unlock operations
• Policy follows protected backups and Data Edge placements

Database-native principals, roles, grants, classification, approvals, and deny-by-default authorization.

• Principal, role/group, GRANT, and REVOKE surfaces
• Object-level access controls and authenticated query enforcement
• Classification labels, clearances, separation of duties, and break-glass controls

Hash-chained audit records capture security and administrative decisions for review and export.

• Identity, policy, licensing, and Trust Fabric events
• Two-sided audit intent for cross-instance exchange
• SIEM-oriented operational evidence

Search by words, meaning, connections, and time through one engine.

• Keyword and full-text retrieval
• Vector search with HNSW and IVF indexes
• Timeline, entity, and graph-oriented retrieval

Generate, quantize, index, and re-embed vectors through a provider abstraction.

• Pluggable embedding providers
• HNSW and IVF vector indexes
• Re-embedding pipelines and compact quantization

AthenaDB builds cited context packets without granting a model or remote peer raw database access.

• Excerpts, citations, provenance, and confidence
• Classification and access policy applied before release
• Shared foundation for RAG and Trust Fabric requests

Planned in-database generation loads signed model packages into protected memory near the data.

• In-process runtime or dedicated Model Node
• Encrypted, signed model packages
• Governed external-provider path when explicitly enabled

AthenaDB includes its own parser and executor for relational queries over the native engine.

• SELECT and data manipulation surfaces
• Schema and index management
• Views, functions, and event-driven programmability

A SQLite-compatible C API and CLI provide an Early Access migration path for existing applications.

• Source-compatible C API subset
• athenadb-sqlite3 compatibility CLI
• Native AthenaDB encryption and retrieval underneath

Views, pure scalar functions, declarative event hooks, and signed domain packs add logic without arbitrary trigger code.

• Saved views and reusable pure functions
• Declarative, audited event hooks
• Signed and permission-gated domain packs

AthenaDB securely fetches and exchanges data on behalf of an app, removing the need for a separate app data API gateway.

• Bidirectional fetch, push, and exchange
• Short-lived, regularly rotating tunnel keys
• One model across Lite, Server, and CSP deployments

Stable native integration starts with the C ABI and CLI, with ODBC and first-party language SDKs tracked toward completion.

• Versioned additive C ABI
• Scriptable CLI across engine operations
• ODBC and language SDK roadmap

AthenaDB instances establish scoped, revocable, non-transitive trust instead of exposing raw linked databases.

• Cryptographic instance identity
• Structured requests rather than arbitrary remote SQL
• Permission-filtered results and two-sided audit

Encrypted oplog and changeset exchange supports offline-first Lite-to-Server data movement.

• Authenticated session key agreement
• Conflict handling and peer cursors
• Relay-friendly sealed exchange foundations

Planned CSP-operated database distribution places policy-approved data near workloads.

• CDN-like placement designed for mutable database data
• Named edge locations and policy-governed synchronization
• Geo-residency restrictions such as USA, North America, or EU

Planned replication, sharding, failover, and multi-region placement build the scale-out Server tier.

• Consensus-backed replication
• Failover and operational control
• Multi-region placement with policy constraints

AthenaDB targets Windows, macOS, Linux distributions, FreeBSD, and Solaris without requiring a container or VM.

• x86_64 and arm64 target lanes
• Native service managers and key custody
• Signed package and installer roadmap

A cross-platform desktop administration surface for AthenaDB and multiple external database engines.

• Object exploration and query workflows
• Backup, restore, and cross-database copy
• AthenaDB DBA features expanding in Early Access

Planned provider APIs integrate provisioning, policy, billing, Data Edge, and operations with a CSP’s own control plane.

• Versioned, idempotent lifecycle operations
• Residency, key-policy, and Data Edge controls
• Provider metering, health, and audit surfaces

Legal, Medical, Research, and other packs add vertical schemas and workflows through a signed sandbox.

• Permission-scoped capabilities
• Signed manifests and sandbox enforcement
• Vertical-specific ingestion and retrieval