Message Broker route and auth compatibility matrix.

Matrix Snapshot

Matrix rows

17

Status values

6

Auth modes

4

Audience

Use this matrix when deciding whether a Message Broker route family, auth mode, replication surface, queue behavior, CLI/SDK path, or Kafka compatibility statement is active controlled-beta behavior, locally bounded, unsupported, preview-only, future-facing, or still waiting on reviewer acceptance.

Maturity Status

Compatibility Scope

Status Legend

Route And Auth Matrix

Message Broker route, auth, queue, replication, and protocol compatibility rows

Capability	Status	Maturity	Notes	Evidence	Last reviewed
Health readiness route	Supported	Controlled Beta	GET /health is public and reports readiness, storage, release metadata, and configured security posture without exposing credentials.	SMB-EVID-002 SMB-EVID-008 DOCS-031	2026-08-16Due 2026-09-30Current
Runtime auth modes	Partial	Verification Required	insecure-local, api-key, mTLS trust-file, and trusted-header external modes are documented; mTLS and external modes rely on a trusted upstream.	SMB-EVID-005 SMB-EVID-008 runtime-authentication-middleware.md	2026-08-16Due 2026-09-30Current
Stream management routes	Supported	Controlled Beta	PUT /v1/streams/{stream}, GET /v1/streams, and GET /v1/streams/{stream} are implemented with create, list, and describe permissions.	SMB-EVID-002 SMB-EVID-003 SMB-EVID-008	2026-08-16Due 2026-09-30Current
Versioned publish and replay routes	Supported	Controlled Beta	POST and GET /v1/streams/{stream}/records support single-record publish and bounded replay by offset or time selectors.	SMB-EVID-003 SMB-EVID-008 DOCS-031	2026-08-16Due 2026-09-30Current
Cursor and consumer-group inspection	Supported	Controlled Beta	Consumer group, cursor list, lease list, delayed retry, replay-consumer, cursor commit, and cursor rewind routes are implemented.	SMB-EVID-003 SMB-EVID-008 DOCS-031	2026-08-16Due 2026-09-30Current
Shared queue claim and delivery mutation	Supported	Controlled Beta	Queue claim, ack, nack, renew, retry, and dead-letter routes persist delivery state and recover payloads from SegmentStorage.	SMB-EVID-004 SMB-EVID-007 SMB-EVID-008	2026-08-16Due 2026-09-30Current
Audit query/export and metrics scrape	Partial	Controlled Beta	Audit routes are administrator-only and tenant-filtered in protected modes. Metrics are available only when HTTP metrics exposure is enabled.	SMB-EVID-002 SMB-EVID-008 DOCS-031	2026-08-16Due 2026-09-30Current
Storage administration inspection	Partial	Controlled Beta	Storage routes expose catalog, retention dry-run, tiering readiness, archive manifest, and quarantine inspection; they do not move, delete, upload, archive, or compact data.	SMB-EVID-002 SMB-EVID-008 DOCS-031	2026-08-16Due 2026-09-30Current
Replication status and worker control	Partial	Verification Required	Status, poll, pause, and resume routes exist, but worker actions require configured bindings and do not by themselves prove cross-site outcomes.	SMB-EVID-005 SMB-EVID-008 DOCS-031	2026-08-16Due 2026-09-30Current
Replication target apply	Partial	Verification Required	POST /v1/replication/target/apply accepts bounded target batches, but target-environment proof and accepted gaps are still required for stronger claims.	SMB-EVID-005 SMB-EVID-008 runtime-replication-worker.md	2026-08-16Due 2026-09-30Current
Tenant visibility, RBAC, and quota boundaries	Verification Required	Verification Required	Tenant-scoped stream visibility, auth policy, quota accounting, metrics labels, and audit filtering need security and operations acceptance before stronger wording.	SMB-EVID-005 SMB-EVID-008 SMB-EVID-010	2026-08-16Due 2026-09-30Current
Remote CLI management reads	Partial	Controlled Beta	Remote CLI can call HTTP health, management inspection, and diagnostics routes over http:// targets; remote data writes and mTLS credentials are outside current CLI transport.	SMB-EVID-009 DOCS-032	2026-08-16Due 2026-09-30Current
Rust SDK HTTP workflows	Partial	Controlled Beta	HttpNativeClient covers publish, replay, cursor, and queue helpers for http:// targets but does not inject runtime credentials without caller-provided transport behavior.	SMB-EVID-009 DOCS-032 native-sdk.md	2026-08-16Due 2026-09-30Current
Compatibility adapter harness	Preview	Preview Contract	Native, HTTP, and Kafka-shaped scenario harnesses are contract and fixture evidence for produce, consume, cursor, offset, and unsupported-feature behavior.	SMB-EVID-009 native-api-contract.md compatibility-adapter-test-harness.md	2026-08-16Due 2026-09-30Current
Kafka-shaped migration prototype	Preview	Preview Contract	KafkaCompatibilityAdapter maps typed produce, fetch, and offset commit requests to the native in-memory broker. It is not a network listener.	SMB-EVID-005 native-api-contract.md kafka-compatibility-scope.md	2026-08-16Due 2026-09-30Current
Kafka network listener and external Kafka clients	Unsupported	Verification Required	There is no current Kafka network listener, Kafka wire-protocol compatibility, or external Kafka client smoke evidence.	SMB-EVID-005 PRODUCT_SPEC.md kafka-compatibility-scope.md	2026-08-16Due 2026-09-30Current
Future protocol compatibility expansion	Future	Future	Real Kafka protocol work or additional broker protocols remain future roadmap direction until a listener, client smoke evidence, and reviewer acceptance exist.	SMB-EVID-005 PROJECT_MANAGEMENT.md	2026-08-16Due 2026-09-30Current

Current Limits

Explicit Exclusions

General broker replacement wording, production support, performance, scale, security, availability, direct identity-provider validation, strict cross-site durability, failover, Kafka wire-protocol compatibility, and customer commitments are outside the active controlled-beta route surface described by this matrix.

Evidence

Internal review records track this Message Broker compatibility matrix and the evidence required to change row status.

Limits

This matrix covers current Message Broker route, auth, CLI, SDK, and compatibility-scope documentation only. It does not approve broad support, security, performance, scale, availability, direct identity-provider, strict replication, failover, or Kafka network listener claims.

See the HTTP reference for route behavior and the CLI and SDK reference for tooling boundaries.

Safe Next Steps

• 

  Available: DOCS-023

  Run stream and queue quickstart

  Exercise stream create, publish, replay, queue claim, ack, inspection, and the local replication boundary.

• 

  Available: DOCS-031

  Read HTTP reference

  Use route shapes, auth requirements, examples, errors, and limits behind each matrix row.

• 

  Available: DOCS-032

  Read CLI and SDK reference

  Check lifecycle flags, diagnostics, remote CLI limits, SDK HTTP boundaries, and queue helper coverage.

• 

  Available

  Review Message Broker evidence

  Check source records before expanding auth, tenant, replication, protocol, support, security, or operations wording.

• 

  Available: DOCS-042

  Read known limits

  See unsupported Kafka listener behavior, replication outcome boundaries, auth posture, and remote CLI limits.

• 

  Available: DOCS-043

  Track matrix review workflow

  Use the workflow for stale-row checks, evidence refresh, owner review, and release-note updates.