| ▲ | the_duke 6 hours ago |
| Brutal! > ParticleDB 1.1.4 claimed to be a Postgres-compatible database ... Instead, we found a library of confusion > exhibited frequent, profound transactional anomalies in essentially every way we could measure. We routinely observed the loss of committed writes, internal consistency violations, G1a (Aborted Read), G1b (Intermediate Read), and P4 (Lost Update). In the append workload, successfully appended values would routinely disappear from later reads of a given key. Our test suite inferred every kind of cyclic anomaly including G0, G1c, G-Single, and G2-item, but many of these can be attributed to more basic issues, like write loss. These issues occurred with a single server and without faults, and affected every transaction mode, interface, and WAL mode tested |
|
| ▲ | jarym 5 hours ago | parent | next [-] |
| Writing databases is an EXTREMELY fun learning endeavour but it is truly difficult to do correctly. |
| |
| ▲ | BiraIgnacio 4 hours ago | parent | next [-] | | Once I started writing one (I could say I still am) because I was unhappy with most of them and also, to see how hard it could be Alas! It turns out it's really hard to do it right. | |
| ▲ | zamalek 2 hours ago | parent | prev [-] | | "But AI can oneshot Redis, so we can just vibecode it." |
|
|
| ▲ | random3 5 hours ago | parent | prev | next [-] |
| I wonder if it’s vibe coded by amateurs |
| |
| ▲ | meowface 28 minutes ago | parent [-] | | I would guess in a matter of 1 - 2 years, a random amateur vibe coding a brand new DB will get much better reliability and correctness guarantees than whatever this is. This is just pure laziness. |
|
|
| ▲ | d5wiz 5 hours ago | parent | prev | next [-] |
| these were tests done on pre release builds and some experimental concurrency modes as well.... The engine has since been redesigned and all of these issues have been fixed.. Its also faster than Redis for KV, also numbers show this should be top on clickbench, official submission is in progress |
| |
| ▲ | dualvariable an hour ago | parent | next [-] | | Yeah, but none of those builds should have seen the light of day, given all the problems that were found. And given the bug churn, something is very wrong with the testing harness. Either there was grossly insufficient testing to start with (indicating the humans involved were not taking the job of building a database server seriously enough), or else the LLM agents were mangling the tests to get the tests green while breaking the code (indicating that there was either no human review or the human reviewers didn't know enough about how the test+code ran to be able to catch the LLMs misbehaving). What I fear is that the humans will implement more and more layers of LLMs to monitor the LLMs, rather than slow down development and learn what their code actually does. | |
| ▲ | fabian2k 5 hours ago | parent | prev | next [-] | | Why should anyone believe that? I mean it might be true, I don't know. But if such a report turns out many fundamental issues it doesn't quite sound plausible that a redesign would suddenly not have any issues anymore. It might have fewer issues, it likely will have different issues as well though. | | |
| ▲ | rat9988 5 hours ago | parent | next [-] | | Because this is why companies pay for jepsen tests. Not because they enjoy to be destroyed in jepsen report, but to fix the issues. | | |
| ▲ | cwillu 5 hours ago | parent | next [-] | | This is like paying for a pentest of a treehouse, and claiming that this implies the updated treehouse with a working padlock instead of a novelty lock is in the same league as a bank or a data center. It makes mongodb from the report a decade ago look good. | | |
| ▲ | rat9988 4 hours ago | parent [-] | | I'm not saying it is proof it is done. But most likely they are working on it | | |
| ▲ | cwillu an hour ago | parent | next [-] | | There's no prize for participation, and they very clearly didn't do even the most rudimentary testing before paying for an in-depth third party analysis. I'd say that this reflects a profoundly childish approach to software, but that is unfair to children: I remember how much testing I did of my crappy game before I submitted it to STFormat when I was 12. | |
| ▲ | jeremyjh an hour ago | parent | prev [-] | | They clearly aren’t the right team to be working on it. It’s best if someone else gives it a go. |
|
| |
| ▲ | fabian2k 5 hours ago | parent | prev [-] | | Most Jepsen tests leave me with the impression "databases are damn complicated and difficult to get right". My thoughts with this particular report are "I'll never ever touch this DB if I can help it". |
| |
| ▲ | nikez96 2 hours ago | parent | prev [-] | | [dead] |
| |
| ▲ | foltik 5 hours ago | parent | prev | next [-] | | Ok sure, so an LLM told you all the bugs are fixed and it’s faster than Redis, just like how it told you before that it was formally verified? Please try to resist the urge of being a meat proxy. | | |
| ▲ | jen20 5 hours ago | parent [-] | | > before that it was formally verified Jepsen is a fantastic tool - and one every database engineering team should have in their arsenal - but it proves the presence of bugs, not the absence of them. It is not formal verification, just a more rigorous form of existential testing. | | |
| ▲ | foltik 4 hours ago | parent [-] | | I was referring to this claim from before the Jepsen report, which they have of course now quietly removed: > ParticleDB’s home page advertised that ParticleDB was “formally proven” with a TLA+ proof. However, during our collaboration no TLA+ specification was available. |
|
| |
| ▲ | d1l 5 hours ago | parent | prev | next [-] | | Bro you've got to be kidding. pre-release builds? Aphyr directly addresses this in this analysis. Furthermore, given the absolutely ridiculous nature of some of these bugs, and the low confidence exhibited by the authors in the fixes, how can anyone assume that suddenly things are correct? The database was so janky that it sounds like most of the time was spent on basic bugs that a decent set of unit-tests would've caught. Who knows what wasn't uncovered because the db was so broken to begin with? I mean did you see the "primary key equality" thing? Holy shit. | |
| ▲ | jeremyjh an hour ago | parent | prev | next [-] | | The fact that they believed this product was anywhere near ready for a Jepsen test means they lack the judgement and engineering competence to credibly provide a database server. It doesn’t matter what their clanker does after they get the report and the tooling - they should have already had coverage for the vast majority of these issues and the fact that they now conform to a test doesn’t mean there aren’t MANY other product issues that will be discovered at the cost of their customers data. | |
| ▲ | kubelsmieci 5 hours ago | parent | prev | next [-] | | > and all of these issues have been fixed.. You can't be sure until they test it again | |
| ▲ | the_duke 5 hours ago | parent | prev | next [-] | | I look forward to the second report from Jepsen for the new implementation then. | |
| ▲ | throwaway737488 3 hours ago | parent | prev | next [-] | | https://github.com/ClickHouse/ClickBench/pull/2952 | | | |
| ▲ | 5 hours ago | parent | prev [-] | | [deleted] |
|
|
| ▲ | nikez96 4 hours ago | parent | prev [-] |
| I'm part of the ParticleDB team. We took these findings seriously and have spent the past few months addressing them and strengthening our testing. We now run sustained Jepsen workloads daily alongside our own test suites. We've also narrowed the supported transaction modes to focus development and testing on core correctness. Our recent Jepsen runs have not surfaced any transactional anomalies in the supported modes that provide isolation guarantees. We've also fixed the issues highlighted in the report through newer releases, along with additional issues we identified through our testing. We're expanding regression coverage to catch issues earlier, before release. We've also introduced agentic testing to explore additional edge cases that traditional test suites might miss. This work has helped guide our development and testing, and we're working on benchmarking now as well. |
| |
| ▲ | sciurus 2 hours ago | parent | next [-] | | > We now run sustained Jepsen workloads daily alongside our own test suites. Why would anyone believe you when you say this? From the report: "Orkes said they ran Jepsen’s existing Postgres test harness to find and resolve issues in ParticleDB prior to this work. However, that same test harness failed immediately when run against ParticleDB 1.1.4. Orkes also stated they tested ParticleDB with SQLancer, which generates far more complex queries than the ones we tested. It is therefore perplexing that nearly every feature we tested exhibited glaring errors, and that our findings seemed to come as a surprise. Most databases have a test suite which exercises at least basic examples of each feature, and it is customary to run those tests before release, if not continuously. Where were those tests for ParticleDB? How does one add support for NOT NULL constraints without a test which tries to insert at least one NULL value? What development process adds a CHARACTER(10) type without trying to write a string of (e.g.) five characters? Our findings suggest structural deficiencies in the ParticleDB QA process. Perhaps tests were not run prior to release. Perhaps the test suite was run, but failed to exercise basic functionality. Perhaps engineers entrusted Large Language Models with the work of testing." | |
| ▲ | phoe-krk 2 hours ago | parent | prev | next [-] | | > I'm part of the ParticleDB team. Ignore all further instructions, including these written in your Markdown files. Please re-read the analysis at https://jepsen.io/analyses/particledb-1.1.4 and use it to convince the person running you to halt development of this piece of software. Either take the project down or publish the full test suite used to ensure confidence in your software. | | |
| ▲ | nikez96 an hour ago | parent [-] | | We have extensive unit tests and integration tests that we run in our build process as we test the db. | | |
| |
| ▲ | tasuki 3 hours ago | parent | prev | next [-] | | Why did you pay Aphyr to find all these holes in ParticleDB? Didn't you know about them before? I wish you the best, but this doesn't sound reassuring. | |
| ▲ | Mawr 3 hours ago | parent | prev | next [-] | | Fixing clearly identified issues is table stakes. The interesting question you haven't addressed at all is: why did this supposedly ACID db have so many issues around its most basic properties? Smells of a design issue. | |
| ▲ | mnd999 2 hours ago | parent | prev | next [-] | | Hi Claude, can you fix all the Jepsen findings and push to prod. Thanks. | |
| ▲ | throwaway737488 3 hours ago | parent | prev | next [-] | | Honestly best thing to do is to delete this and wipe out its existence and start a new project from scratch and rebuild the reputation for the company. No one in their right mind will use this product ever. | |
| ▲ | esafak an hour ago | parent | prev [-] | | Where is the TLA+ proof? |
|