github.com/faustbrian/go-workflow v1.0.0

1.0.0 - 2026-08-25

Fixed

• Verify workflow, Kafka, and outbox interoperability through versioned module
  archives without former-monorepo replacement paths.

Changed

• Upgrade moby/go-archive and golang.org/x/crypto to their current
  security-fixed releases and reconcile the resulting indirect dependency
  graph.

• Exclude intentional nested modules from root local-proxy archives so local,
  bootstrap, CI, and public module checksums describe the same source
  boundary.

• Track the pinned documentation-tool lockfile so clean CI checkouts install
  the exact validated cspell dependency.

• Reconcile standalone dependency checksums against deterministic current
  module archives so CI, local verification, and release consumers resolve
  identical content.

• Harden standalone documentation validation with deterministic spelling and
  link checks, package-specific documentation gates, and repository-local
  contributor guidance.

Documentation

• Link the package README to the repository-wide Golib documentation portal.

Added

• Clean-consumer PostgreSQL interoperability proof for atomically staging
  workflow transitions with optional outbox envelopes and deduplicating
  inbound signals at the durable boundary required before caller
  acknowledgement, plus live Kafka partition recovery with stable duplicate
  identity and keyed ordering.
• PostgreSQL process-death, deadlock, restart, consistent snapshot-restore, and
  streaming-replica promotion drills, plus exhaustive deterministic lifecycle
  model, bounded worker stress, shutdown-join, and continue-as-new history-soak
  tests.
• Mixed-version rolling-deploy replay proof for old, new, and incompatible
  definition registries, plus a PostgreSQL process-kill drill after an activity
  side effect that proves redelivery records an unknown outcome without
  repeating the effect.
• A bounded accelerated soak harness that advances deterministic workflow time
  across three logical days, with immutable input evidence and retained heap
  and goroutine ceilings.
• Architecture, operations, recovery, capacity, security, verification, FAQ,
  and compiling durable-orchestration adoption documentation.
• Stable unresolved dead-letter inspection and idempotent, audited, fenced
  PostgreSQL retry or discard decisions with explicit replacement deadlines.
• Caller-owned PostgreSQL transaction staging for atomically composing workflow
  transitions with application state or optional transactional outbox records.
• Bounded worker lifecycle hooks for claims and readmission, processor starts,
  lease heartbeats, completions, retries, dead letters, and existing failure
  paths, with durable work kind and attempt metadata kept out of metric labels.
• Fenced child-start processing with persisted pre-creation attempts, explicit
  known-started, known-absent, and unknown outcomes, stable idempotency keys,
  crash-safe redelivery, and durable policy-bound retries only after known
  absence.
• Version-pinned child workflow definitions, atomic parent history and
  WorkChild admission, bounded dispatch metadata, replayed child progress,
  known terminal outcomes, and deterministic parent orchestration.
• Persisted bounded signal and approval races with deterministic winner
  selection, immutable replayed race progress, and winner recording before
  later orchestration can advance.
• Deterministic bounded parallel activity admission that persists every branch
  schedule atomically, waits for all branch outcomes, and advances through
  explicit joins without treating partial admission as valid progress.
• Fenced activity work processing that persists attempt starts before external
  handlers, reconciles uncertain store commits, preserves unknown side-effect
  outcomes on crash redelivery, and durably schedules bounded known-safe retries.
• Independently fenced compensation work processing with start-before-effect
  persistence, conservative unknown rollback outcomes, and durable policy-bound
  retries that never report failed compensation as successful rollback.
• Explicit bounded activity requests and registries with persisted deadlines,
  attempt metadata, idempotency keys, tenant/correlation propagation, and
  distinct success, known-failure, and unknown-outcome results.
• Atomic activity scheduling, persisted attempt starts, explicit outcome
  transitions, and deterministic retry admission with durable work that keeps
  redelivery identity separate from semantic retry identity.
• Deterministic replay of durably scheduled activity attempts, known outcomes,
  unknown outcomes, and bounded exponential retry admission decisions.
• Immutable bounded transition plans that atomically couple optimistic history
  appends with due work, plus stable history pagination and explicit unknown
  commit outcomes for durable-store adapters.
• PostgreSQL durable storage with a versioned caller-owned schema, atomic
  optimistic history-and-work commits, conflicting transition detection,
  idempotent exact replay, bounded stable pagination, and rollback-safe failure
  handling.
• Stable PostgreSQL instance listing across active and archived views plus
  exact reconciliation for uncertain transition commit outcomes.
• Bounded durable-work claims with atomic PostgreSQL admission, expiring leases,
  monotonically increasing fencing tokens, crash recovery, renewal, explicit
  retry times, stale-owner rejection, completion, and dead-letter disposition.
• Bounded workers with deterministic clocks, tenant-fair admission, explicit
  processor dispositions, periodic lease renewal, stale-owner cancellation,
  graceful draining, bounded finalization, and synchronous lifecycle hooks.
• Durable timer scheduling and firing with atomic due-work admission, plus
  bounded deduplicated signal acceptance that must commit before transport
  acknowledgement and replays from persisted decisions only.
• Explicit ordered compensation history and durable first-attempt dispatch,
  bounded input, persisted attempt starts and explicit outcomes, independently
  durable retries, stable idempotency identities, and manual resolution that
  remains distinct from successful rollback.
• Idempotent audited lifecycle operator commands for pause, resume,
  cancellation, and termination with optimistic concurrency and replay checks
  that reject orphaned or mismatched audit records.
• Audited operator commands for activity retry, explicit compensation, and
  truthful manual compensation resolution, with audit history and due work
  committed through one optimistic transition.
• Deterministic ordered orchestration decisions for activity, timer, signal,
  and audited human-approval steps, including explicit waiting and truthful
  known-failure terminal outcomes.
• Bounded deterministic instance inspection and streaming history export over
  stable forward pages with explicit traversal limits.
• Immutable durable lifecycle history, deterministic replay, pinned definition
  verification, explicit persisted migration decisions, cancellation,
  termination, and continue-as-new outcomes.
• Immutable explicitly versioned workflow definitions, bounded activity and
  compensation policies, pinned registry lookup, and explicit migrations.

Changed

• Publish the module from its standalone github.com/faustbrian/go-workflow identity while preserving its documented API and behavior.
• Upgrade golang.org/x/text to v0.41.0 so the dependency graph no longer
  contains GO-2026-5970.
• PostgreSQL commits now archive completed, failed, cancelled, terminated, and
  continued-as-new instances atomically with their terminal history.
• StepChild definitions now require ChildDefinition; existing child steps
  must pin the exact registered child name, version, and fingerprint.

Release integrity

• Source commit: aef739f62aa389008eebcbedb74492d2e3067b9e
• Exact-head CI: https://github.com/faustbrian/go-workflow/actions/runs/32907581641
• Release dry-run: urn:sha256:43bbc4bd48d6e1c6562bc1ff96c3b98f01ef5bd2069298485bc11a3cdd12b96b
• Assets include a CycloneDX SBOM, SLSA v1 in-toto provenance, and SSH-signed checksums.

Verify the checksum attestation with:

ssh-keygen -Y verify -f ALLOWED_SIGNERS -I brian@cline.sh -n golib-release -s SHA256SUMS.sig < SHA256SUMS