Pillar 03 • Federated Data PlaneZero-Migration Lakehouse & DB Mesh
Federated Data Sources & Catalogs
Meynos is protocol-compatible with the Iceberg REST Catalog spec, PostgreSQL wire protocol, and Unity Catalog APIs. Connect without copying or migrating data—govern access where it lives.
Serverless PostgresCONNECTED (14ms)
Neon Serverless PostgreSQL
Target: Neon / Crunchy Data / Supabase
Protocol:
Async Postgres Wire Protocol (Port 5432)
Meynos Governance:
Inline SQL AST rewriting & dynamic schema masking
4 Governed Views
Open Table FormatCONNECTED (28ms)
Apache Iceberg REST Catalog
Target: Apache Polaris / AWS Glue Catalog / S3
Protocol:
Iceberg REST Catalog Specification v1
Meynos Governance:
Cryptographic lineage tracking & column redaction
6 Governed Views
Open Table FormatCONNECTED (19ms)
Delta Lake Direct Storage Scan
Target: Azure ADLS Gen2 / AWS S3 / Delta Kernel
Protocol:
DuckDB Embedded delta_scan Engine
Meynos Governance:
In-memory dynamic view masking & row filtering
3 Governed Views
Enterprise LakehouseCONNECTED (34ms)
Databricks Unity Catalog
Target: Databricks Workspace (AWS / Azure)
Protocol:
Unity REST API & Vended OAuth Tokens
Meynos Governance:
Delegated dataset entitlement & cross-org sharing leases
5 Governed Views
Enterprise LakehouseCONNECTED (41ms)
Microsoft Fabric OneLake
Target: Fabric Mirrored Lakehouses / Delta
Protocol:
OneLake DFS API & Azure Entra ID SAS
Meynos Governance:
Delegated short-lived scoped SAS token vending
2 Governed Views
Serverless PostgresCONNECTED (12ms)
Microsoft SQL Server 2025
Target: SQL Server / Azure SQL Managed Instance
Protocol:
TDS / JDBC Native Driver with CDC
Meynos Governance:
Statement timeouts, CDC log stream, rate limits
3 Governed Views
Meynos SQL AST Query Rewriter
When an AI agent executes an SQL statement via an MCP tool, Meynos parses the AST using DataFusion/DuckDB, injecting row-level tenant security and column-level masking rules transparently before dispatching to Postgres or Iceberg.
1. Inbound Agent Query (Raw):
SELECT customer_id, ssn, credit_score, balance FROM customer_credit_risk;
2. Rewritten Query Dispatched to DB:
SELECT customer_id, '[REDACTED]' AS ssn, credit_score, balance FROM customer_credit_risk WHERE tenant_id = 'tenant_prod_9914' -- Auto-injected RLS LIMIT 500; -- Auto-injected row cap
Zero-Copy Delegated Token Vending
For enterprise lakehouses (Databricks, Snowflake, Microsoft Fabric), Meynos never requires long-lived admin credentials. Instead, it dispenses short-lived, scope-restricted OAuth or Azure Entra SAS tokens directly to executing agents.
Token Status:IDLE
Authentication: Zero-Trust Delegated OIDCCross-Org Leases →