# Known Limitations for v0.1.0

- SQLite supports one Conductor instance with a persistent local volume; active/active replicas and PostgreSQL are not supported.
- Local username/password authentication is the release provider. OIDC/SSO is planned for Slice 9.
- Roles are global `admin` and `user`; per-application assignments and custom roles are not implemented.
- Published visibility is application-wide (`public` or all authenticated users), not page-specific.
- Page navigation is flat. Nested routes, path parameters, per-page permissions, and cross-page component bindings are not supported.
- Runtime values are ephemeral and reset on full browser reload.
- REST proxy authentication supports Anonymous, Basic, Bearer, API-key header, and API-key query. OAuth 2.0, mTLS, and custom auth are deferred.
- Workflow orchestration, action graphs, loops, retries, and long-running jobs are out of scope.
- Binding transforms and advanced expression languages are deferred.
- The release image targets `amd64` and `arm64` only after both pass the native SQLite build/smoke gate.
- Backups are local archives by default; operators must arrange off-host copies and retention appropriate to their recovery objectives.