to clarify - that does mean that we won't be able to set up check requests to run against read replicas?

There are ways to achieve this but it's not supported: https://github.com/authzed/spicedb/issues/1320

This is helpful context, thanks!

we're working on formal support for it