currently, all postgres transactions are run in REPEATABLE READ isolation level, which is almost certainly more than we really need. The difficulty is the need to audit all of our transactions to check which actually need it.