| Local Rust engine / embedded crate | Implemented | Downloadable local engine and CLI; single-process writer per data directory | Core crate, CLI product gates, local recovery tests |
HTTP /v1 API | Implemented | Product routes under /v1; JSON over HTTP/1.1; bearer-token auth | OpenAPI contract, conformance harness |
| TraceQL | Implemented, bounded | Line-oriented command/query language; converges on HybridQuery | See TraceQL |
Native GraphQL /v1/graphql | Implemented | Native TraceDB root fields only; standard data/errors envelope; one root field per operation | See Native and Bounded GraphQL |
Bounded GraphQL /v1/graphql/bounded | Implemented | Query-only single-root-table adapter; returns QueryResponse shape | See Native and Bounded GraphQL |
| OpenAPI/Fern API reference | Implemented | Committed OpenAPI mirror; tracedb-protocol remains authoritative | Docs CI validates the mirror |
| Rust SDK | Private-alpha receipt | tracedb-sdk v0.1.1 is a staged artifact; install only with private-alpha credentials | See SDK Strategy |
| TypeScript SDK | Private-alpha receipt | @tracedb/sdk v0.1.1 is a staged artifact; install only with private-alpha credentials | See SDK Strategy |
| Python SDK | Private-alpha receipt | tracedb v0.1.1 is a staged artifact; install only with private-alpha credentials | See SDK Strategy |
| Go SDK | Reserved/candidate | tracedb-go repository and module are reserved; not a supported current install surface | See SDK Strategy |
| Hosted TraceDB service / gateway | Hosted-only | Proprietary managed surface separate from the downloadable distribution; invite-only access | See Hosted Alpha |
| S3 runtime storage / rehydrate | Partial | Local durability is filesystem-first; S3 integration is a hosted/runtime target, not a self-serve local feature | Storage docs and remote validation gates |
| SES transactional email | Non-goal for v1 | No email gateway in the core engine or SDK | Hosted control-plane boundary |
| Benchmark claims | Partial | Internal regression gates and controlled lab receipts only; no public benchmark superiority claims without external controls | External-control benchmark gate |
| TDE encryption-at-rest | Implemented, opt-in | Local TDE encrypts WAL payloads, framed v3 checkpoint payloads, segment objects, and index artifacts when configured; manifest metadata remains plaintext; key rotation is not implemented | See Boundaries; detailed TDE notes stay in the canonical docs tree |
| Compliance certifications | Non-goal for v1 | No SOC 2, HIPAA, ISO, or other compliance certification is claimed | See Boundaries |
| Distributed consensus/replication/managed DR/SLA | Non-goal for v1 | Single-node local engine; no replication, distributed consensus, managed backup/DR, or SLA claims | See Boundaries |
| TraceField / memory runtime research | Research | Placeholder/scaffolding only; not the current product surface | Research lane, not hosted-alpha docs |