Developers can run isolated App development against managed PostgreSQL using explicit database grants and verified TLS. Before enabling DEVELOPER_DATABASE_ACCESS_POLICY=database-grants, preserve Core/operator grants and revoke PUBLIC CONNECT on every connectable database. New tenant databases remain closed until their public grant is revoked. Default hba deployments are unchanged.

Use Sandbox Manager 0.1.0-alpha.4 or later for managed database probes and container-readable mounts under a restrictive operator umask. Run the continuous runtime supervisor with private App networks, fixed database routing and a trusted TLS ingress; Core alone does not execute App PHP.

Developers Console now provides development stop/resume controls using the same personal sandbox, authorization and revision checks as the CLI transport. Stopping preserves source and data. Keep nexia dev running after resuming. Submission, publication and customer installation are separate stages.