DBaaS (SS-02)
ADR-0056: the only database plane — relational, document and vector engines as governed claims.
RDS · DynamoDB · Redshift, one plane
Relational, document, vector and analytics data — one governed database plane.
What it is
ADR-0056 makes the DBaaS the only database plane on the platform: every engine is a claim with placement, leases, CDC, point-in-time restore and key rotation. Prism turns product events into contract-checked metrics; Mediation rates and reconciles high-volume usage records. No shadow databases, no unmanaged data.
Auth is one model across every service here — an SS-01 bearer token plus X-Tenant-Id on every /api/v1 route. Public base https://api.nexocloud.io/api/v1.
Services & endpoints
Every path below is a real route from services/<svc>/openapi.json. Each service lists a representative slice of its full contract.
Managed database engines — claims across relational, document and vector engines with placement, CDC, leases, restore and rotation.
/api/v1/claimsProvision a database claim from the engine catalog./api/v1/claims/{name}/cdcRead the change-data-capture stream for a claim./api/v1/claims/{name}/queryRun a governed query against a claim./api/v1/claims/{name}/restorePoint-in-time restore a claim./api/v1/claims/{name}/rotateRotate a claim's credentials via Vault./api/v1/vector-claimsProvision a vector database claim for embeddings.Product analytics — contract-checked event ingestion, metric definitions and time-series query.
/api/v1/contractsRegister an event contract (schema) for validation./api/v1/eventsIngest a product event validated against its contract./api/v1/metricsDefine a metric over ingested events./api/v1/queryQuery a time-series metric window.Usage mediation — CDR ingestion, deterministic rating against versioned rate decks, reconciliation and suspense repair.
/api/v1/cdrIngest a usage record (deduplicated, spooled when the sink is down)./api/v1/rating/rateRate a record against the active rate deck with a deterministic breakdown./api/v1/rating/rerateRe-rate stored records in a window against the current deck./api/v1/reconcile/casesList open reconciliation cases./api/v1/suspense/{id}/repairRepair a quarantined suspense record.Worked example
Every database is a claim: provisioned from a catalog, streamed via CDC, and restorable to any instant — with credentials rotated through Vault, never held by your app.
/api/v1/claimsPick an engine from the catalog; placement and leases are handled for you.
/api/v1/claims/{name}/cdcConsume a change-data-capture feed for downstream sync or analytics.
/api/v1/claims/{name}/restoreRoll the claim back to a point in time after a bad write.
/api/v1/claims/{name}/rotateRotate the credential; the app reads it as a Vault secret ref.
Architecture placement
Databases & Data does not reimplement the platform — it composes it. These are the services it leans on and the seams between them.
ADR-0056: the only database plane — relational, document and vector engines as governed claims.
Contract-checked product analytics over the same tenancy model.
Deterministic rating and reconciliation for high-volume usage data.
Custodies and rotates every database credential; the app never holds a raw secret.