Public evidence

The benchmark, the method, and the limits.

This page publishes Korve's verified app-auth and database-explorer regression baseline exactly as captured. It is a local, warm-path engineering measurement—not a production latency promise and not a performance comparison.

Captured July 21, 2026 · Public page updated July 29, 2026.

Configuration

A bounded local regression baseline

The harness creates throwaway databases, seeds deterministic rows, warms each path, records serialized samples, and removes the databases when the run finishes.

InputCaptured value
CapturedJuly 21, 2026
HostApple M5 Pro, arm64, macOS 26.4.1
RuntimeBun 1.3.13
DatabasePostgreSQL 17.10 in a local container
Dataset10,000 event rows, one compound index, and one view
NetworkLoopback with warm connections and caches

Reproduce the harness

TEST_DATABASE_URL=<local-test-postgres-url> bun run benchmark:auth-data

The harness rejects non-loopback database hosts before creating or dropping anything.

Exact captured results

Percentiles, sample counts, and maximums

Values below are copied from the checked benchmark artifact. They have not been rounded again, extrapolated, or converted into an uptime or latency guarantee.

PathRunsMeanp50p95Max
App-session API verification2003.29 ms2.68 ms5.11 ms19.91 ms
Opaque-token SHA-256 digest2,000<0.01 ms<0.01 ms<0.01 ms0.13 ms
OAuth state + nonce + PKCE material5000.02 ms0.02 ms0.03 ms1.08 ms
Schema, columns, keys, and indexes256.74 ms5.56 ms8.94 ms23.15 ms
Filtered and sorted 50-row browse507.58 ms6.90 ms10.82 ms26.63 ms
Read-only grouped SQL query1003.06 ms2.84 ms4.49 ms11.11 ms

Across 175 bounded database operations, the observed process-heap change was 5,338,895 bytes (5.09 MiB). The sample recorded no timeouts, cancellations, rejected statements, failed sessions, or leaked result contents.

What this supports

  • The benchmark harness exercises real app-session verification and the bounded database explorer.
  • Every sampled explorer result stayed under configured row and byte ceilings.
  • The measured paths are suitable as a repeatable local regression baseline.

What this does not support

  • It does not measure regional production network latency or a customer workload.
  • It does not establish a production service-level objective or compare Korve with another vendor.
  • It does not measure database provisioning, branching, queue dispatch, cron skew, backup, or restore time.

Read who stands behind the claims.

Korve's author page documents the editorial, disclosure, and correction standard used for technical articles and comparisons.

About the author