{"id":69386,"plugin_id":"plugin_asdk_app_6ab9692ab6108191bc630a4055d7d3d7","kind":"skill","collection_source":"plugin_package","comparison_source":null,"observed_at":"2026-10-29T00:05:33.486Z","digest":"ae01bb18ed277c879ef4eba019e32c49a1b556d399da8699544e61b2f04cc3b1","against":null,"payload":{"description":"Consume PostgreSQL capabilities granted to the authenticated RE8CH tenant.","included_files":[],"name":"tenant-database","skill_md_contents":"---\nname: tenant-database\ndescription: Consume PostgreSQL capabilities granted to the authenticated RE8CH tenant.\n---\n\n# Tenant Database\n\nUse only `re8ch-tenant`. Discover and plan before provisioning. Show storage,\nconnection, backup, retention, placement, quota impact, and approval state.\nCreate, update, suspend, resume, or delete only after explicit instruction.\nStorage may expand but never shrink. Treat connection references as opaque;\nnever expose database passwords, Kubernetes Secrets, node addresses, or Pigsty\ncredentials. Ordinary tenant operations must not bypass their grant boundary\nwith database administration tools.\n\nFor a verified platform-admin session, use `platform_tool_catalog` and\n`platform_tool_call` on this same plugin to discover the separate Pigsty\nadministrator tools. A missing ordinary database Consumable does not restrict\nthe returned administrator catalog. If `postgres_admin_sql` is published, use\nits fixed server-held Supabase credential, read-only inventory first, and its\napproval ID plus plan hash before any write. Do not retrieve Secret values or\nsubstitute `kubectl.exec` for this reviewed SQL entry.\n"},"changes":[],"summary":"First saved snapshot. No earlier version is available for comparison.","summary_kind":"deterministic","summary_metadata":{}}