Shipped vs planned
Pitot is alpha. User-facing contracts and storage formats can change without migration paths. Every documentation page states one of these statuses:
| Marker | Meaning |
|---|---|
shipped | Available with a settled contract. |
preview | Available; the contract can change without a migration path. |
planned | Designed but unavailable. |
llms.txt includes the status of every non-shipped page. A page covering several
capabilities uses preview if any of its contracts remain unsettled.
Where each capability stands
Section titled “Where each capability stands”| Capability | Status | Notes |
|---|---|---|
| OTLP ingest over gRPC and HTTP | shipped | Both transports, one port and named ingest tokens. |
| Parquet storage, trace indexes, and DuckDB analytics | preview | Authoritative local Parquet; rebuildable DuckDB query state. |
| Batch format 5 storage | preview | Typed Parquet attributes and dedicated columns; unsupported batch formats prevent startup. |
| Browser client | preview | Ships in the binary; preview contracts. |
| Explore | preview | Query, Builder and SQL tabs run queries and save dashboard panels without an AI provider. |
| Logs and Traces search | preview | Search with FanQL filters, inspect results and save panels. |
| FanQL | preview | Text queries with diagnostics and completion; filter-only search on Logs and Traces. |
| Built-in agent | preview | Disabled unless PITOT_AI_PROVIDER selects anthropic or openai; the selected provider’s key is required at startup. |
| Dashboards | preview | Build with the panel editor or chat: fifteen panel types, variables, comparison, saved grids and immutable versions with restore. View links retain filters and time; dashboard access remains owner-scoped. |
| MCP tools | preview | Served at /mcp; the tool set is not frozen. |
| Alerts page | preview | Create, edit, test, enable and delete rules without chat; rules evaluate on an interval against rollups. |
| Connected agents | preview | List and disconnect your authorized MCP agents on Connect telemetry. |
| Named ingest tokens | preview | Administrators create, list and revoke up to 50 named tokens on Connect telemetry at /settings/ingest or through HTTP. Revocation applies on the next request. |
| Insights and anomaly detection | preview | Detect error, latency and volume changes against rollup baselines; report insights, log patterns and a health score. |
| Local email sign-in | shipped | Codes by email; no passwords. |
| Local self-signup | preview | PITOT_SELF_SIGNUP, off by default. Provisions viewers after code verification only. |
| SCIM user provisioning | preview | PITOT_SCIM_TOKEN enables create, update and deactivate over SCIM 2.0 in OIDC mode. |
| Alert email | preview | Rules deliver to email addresses through the configured SMTP settings. |
| OIDC account auto-provisioning | preview | Eligible identities receive the configured mapped or default role; the default is viewer. |
| OIDC sign-in | shipped | Provider flow, with group and domain mapping. |
| Generated settings reference | shipped | cmd/pitot-docgen writes it; just check fails when it drifts from the type. |
| Release checksums and provenance | shipped | SHA256SUMS plus GitHub build attestations on every archive. |
| Published ingest benchmark | shipped | Performance reports v2026.11.0-alpha with three sweep repetitions and raw evidence. |
| Signatures and SBOM | planned | Unavailable; see the release contract. |
| Namespace scoping on alert rules | planned | The field is stored but evaluation ignores it; scope with service. |
Operating limits
Section titled “Operating limits”- Namespaces filter queries. Anyone who can query an instance can query every namespace in it. Each instance is one trust domain; use separate instances for mutually untrusted teams. A namespace does not represent a user, organisation or tenant.
- No horizontal scale. Ingest, query and maintenance share one process and one machine.
- Capacity depends on your workload. Payload cardinality, query mix and disk determine capacity. The published benchmark measures one release, host and workload. Measure your own hardware.
- No migration paths. Pitot is pre-release. Storage-format changes may require a fresh data directory. Preserve backups before upgrading.
Keep a separate copy of data you need to retain.