EcosystemDatabases
Valkey
Use Valkey from an agent under ACLs, namespaces and a command policy, so a cache tool cannot become a shell.
Run fh add valkey to install iovalkey and create a managed tenant-prefixed read tool and test. Use TLS/ACLs, command allowlists, value/TTL limits, and administrative/script/flush denial.
Treat writes as governed effects. For runtime persistence, use redisPersistence() with a
Redis-protocol client connected to Valkey; see the Redis guide
for the full bundle, retention, cluster key, and recovery configuration.