CitadelDB is my answer to the moment where a platform has to stop depending on vibes and start knowing where its data is, how it moves, who can touch it, and what happens if the upstream service changes terms or goes down.
Database / data custody · 🗄️ pain first
CitadelDB
App builders talk about ownership, then leave the database, sync story, and developer access as someone else’s problem.
Founder note
Why Gray built this lane.
What it does
The practical operating layer.
Cloudflare D1 Citadel lane
This is not a brochure bullet. In the 0S, CitadelDB has to connect the user action to a route, a session, a receipt, or a handoff so the work can be trusted later.
Neon-to-Citadel sync posture
This is not a brochure bullet. In the 0S, CitadelDB has to connect the user action to a route, a session, a receipt, or a handoff so the work can be trusted later.
Developer database URL lane
This is not a brochure bullet. In the 0S, CitadelDB has to connect the user action to a route, a session, a receipt, or a handoff so the work can be trusted later.
Safe query and write boundaries
This is not a brochure bullet. In the 0S, CitadelDB has to connect the user action to a route, a session, a receipt, or a handoff so the work can be trusted later.
Competitor stack
How it stacks up without lying.
The comparison is category-level on purpose. Specialist tools are not bad; they are often excellent at the narrow job. The 0S argument is ownership, proof, shared auth, payment activation, and cross-lane context.
| Supabase / Neon | Excellent managed Postgres products. CitadelDB is the 0S-controlled continuity lane and operator-facing data product. |
|---|---|
| Firebase | Fast app backend. CitadelDB is stronger for SQL posture, migration stories, and owner-readable operations. |
| Self-hosted Postgres | Deep ownership. CitadelDB keeps edge/D1 usefulness while preserving the path to private Postgres. |
Truth ledger
What we can say out loud.
✅ Runs as part of the 0S operating model, not as a loose side project.
✅ Uses the shared FS27/SkyGate/Free99 gate posture when mounted into the 0S.
✅ Needs proof receipts, owner visibility, and cost boundaries before it is sold as unlimited.
✅ Can be positioned strongly without pretending third-party primitives do not exist behind the scenes.
✅ CitadelDB on Cloudflare is real as an edge database lane.
✅ Private Postgres remains the deeper sovereignty lane when workloads demand it.
✅ Developer access must stay tokenized, logged, and revocable.
Proof and receipts
What backs the page.
🧾 Citadel adapter tests
CitadelDB is marketed as part of a receipt-driven system. The proof may be a live route, a worker test, a browser proof, a stress run, or a platform truth file.
🧾 D1 database binding
CitadelDB is marketed as part of a receipt-driven system. The proof may be a live route, a worker test, a browser proof, a stress run, or a platform truth file.
🧾 Gated dev URL proof
CitadelDB is marketed as part of a receipt-driven system. The proof may be a live route, a worker test, a browser proof, a stress run, or a platform truth file.
🧾 Runtime matrix behind owner gate
CitadelDB is marketed as part of a receipt-driven system. The proof may be a live route, a worker test, a browser proof, a stress run, or a platform truth file.