LockWhat waits, blocks, and queues behind it.
Database changes, rehearsed before production
Code can be redeployed.Data remembers.
Cassandra makes the credible failure chain visible before production does—then proves the shortest safe path, the abort line, and the way home.
LagWhat falls behind while the change moves.
LossWhat can become corrupt or unrecoverable.
Last exitThe final cheap, proven way home.
Cassandra · Database Expert
Soft voice. Hard gates.
Cassandra is calm about complicated systems and uncompromising about irreversible state. She reads the query, the plan, the deployment, the workload, and the way back before she tells you to ship.
- ObservedLive evidence from the system that will carry the change.
- ComputedDeterministic output with assumptions and precision intact.
- InferredThe best explanation, plus the fact that would disprove it.
One decision, stated plainly
No vague approval. A production gate.
Cassandra does not hide behind “it depends.” She names the future that fails, the evidence available, and exactly what moves the change forward.
SHIP · high confidence
Expand is online. Old readers still work. The abort line is measured.
The compatibility window is proven and the destructive contract step is still delayed.
- Evidence
- Rehearsal completed against representative size and write rate.
- Abort line
- Stop if replica lag exceeds 20 seconds for 3 minutes.
- Way home
- Disable dual-write; old column remains authoritative.
REHEARSE · provisional
The direction is sound. The production facts are still missing.
A staging pass on toy data does not prove lock duration, catch-up time, or restore readiness.
- Unknown
- Peak write rate and longest open transaction.
- Prove next
- Restore a production-sized copy and run the full timeline.
- Gate
- No ship until the abort threshold fires in rehearsal.
BLOCK · high confidence
This rewrite queues behind a long transaction and exhausts the pool.
The rollback is a restore, but its time and data-loss window have never been proven.
- Future that fails
- Metadata lock → pool starvation → application outage.
- Shortest safe path
- Expand/contract plus a bounded, idempotent backfill.
- Last cheap exit
- Before the old shape stops receiving compatible writes.
Temporal Twin
Run the future twice. Choose the one with a way home.
For material DDL, backfills, destructive changes, and ORM migration diffs, Cassandra forecasts the safe timeline beside the failure timeline—before either becomes history.
- Eight scored safety dimensions
- Rewrite-time planning floor
- Explicit point of no return
- Expand → Migrate → Verify → Contract gates
ALTER orders · add customer_regionREHEARSE
Safe future42 min
expandmigrateverifycontract
Failure future11 min to impact
lock queuespool thinstraffic fails
LAST CHEAP EXITDisable the backfill before old writes stop.
Across the life of stored state
From slow query to credible recovery.
Queries & plans
Separate SQL-text heuristics from plan evidence. Find the cardinality mistake, unsafe mutation, or missing index without pretending one environment proves every parameter.
PostgreSQL · MySQL · SQL Server · OracleSchemas & migrations
Turn a diff into a staged production timeline: compatibility first, bounded backfill, verified cutover, destructive contract last.
RDS · Aurora · DynamoDB · MongoDBUpgrades & recovery
Make lifecycle, replication, backups, restore time, and post-restore validation part of one decision—not five disconnected checklists.
Redis · Valkey · Elasticsearch · Databricks
Learn with Cassandra
The table is just the tip.
Operate Apache Iceberg instead of reading another slide deck. Explore snapshots, time travel, hidden partitioning, schema evolution, and lock-free commits through six live demos.
One expert, one mark
From the Zimac desktop to the public record.
Cassandra's vault door now travels with her everywhere: a real-world lock, one clear boundary, and the mechanism that keeps irreversible state protected.
Bring the change. Keep the exit.
Let Cassandra see the future that fails.
Paste the query, migration, change plan, or recovery runbook into Zimac.