Read path
PostgreSQL -> Circuits engine -> durable-streams -> pgwasm. Shapes (including membership
fan-out via an uncorrelated subquery predicate) stream into the local pgwasm store. A control plane
grants a subject its subscriptions, and a stream edge gates every read against that grant.