Minimal Privileges
Operates with exactly two PostgreSQL tables. No full DB ownership required.
KontractOne Database, One World
Serverless full-stack TypeScript framework with minimal database privileges, end-to-end encryption, and zero-config MVCC.
Skip to content
Compile-Time Code Splitting
@backend functions are extracted to server bundle; typed RPC stubs generated for the client.
End-to-End Encryption
raystream protocol using ECDH key exchange and ChaCha20-Poly1305 AEAD.
Zero-Config MVCC
Multi-version concurrency control with automatic visibility filtering. No configuration needed.
Serverless-First
Designed for Cloudflare Workers with sub-millisecond cold starts and automatic scaling.
Multi-Tenant Isolation
Physical table isolation via ptr indirection. Each tenant's data is completely separated.