GR_001 · Idempotent Commit Boundary
Failure Pattern Mitigated
- FP_001 Duplicate Execution After Retry Timeout
Invariant Enforced
- INV_001 — logical effects are applied at most once per job.
Guardrail Design
Introduce a durable single-commit boundary (COMMITTED) per logical job.
Only the first execution may cross this boundary; subsequent retries no-op.
Implementation Sketch
- maintain durable
committed_exec_idkeyed byjob_id - on commit attempt:
- if none exists: persist
committed_exec_id, apply effect - if exists: reject/no-op duplicate effect
- finalize
COMMITTED -> DONEseparately to support crash-safe recovery
Tradeoffs
- adds commit-state bookkeeping
- requires recovery reconciliation path for
COMMITTEDbut notDONE
Related Failure Patterns
- FP_001