Hosted droplets have a restrictive cloud firewall (F36 re-rated low); standalone PostgreSQL trust accepted (F37); default SuperUser password is deliberate for trials, but the licensed-mode change is enforced by the client only (F9 note). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>