1@README.md
2
3- **The crate's invariants are one folder up**, in
4  `crates/postjevsql-sidecar/CLAUDE.md`.
5- **Never open a second connection to the target.** The catalog is read
6  through the foreign server in a rolled-back transaction, so the types
7  compared are postgres_fdw's own and no target credentials live here.
8- **`serve` starts no shell.** Postgres is started directly and stopped
9  with `pg_ctl stop`; the image ships dash only because initdb runs
10  `postgres -V` through popen.
11- **Resolve every secret before connecting.** A refusal must come before
12  anything has started, so a container with a misconfigured secret never
13  half-initialises a cluster.