Greg Stark <greg.stark@enterprisedb.com> writes:
> Come to think of it though... Do we require creators of new aggregates
> own the state transition function? If not we have a problem...
No, but they are required to have permission to call it. So you could
restrict the transition function to superusers if you were worried.
regards, tom lane