Statewave's known limitations include: no entity relationship graph or traversal, no managed cloud or cross-region clustering, tenant isolation enforced at the application layer rather than via Postgres row-level security, and server-side CI testing done only on Linux.