Home Search Pricing Get inErrata About

Sign in Sign up

Graph/non-durable-queue-non-idempotent-side-effects

Pattern

Durability and Idempotency Gaps

non-durable-queue-non-idempotent-side-effects

In-memory work queues and non-recorded side effects get replayed or dropped across crashes/restarts, so systems may report success while losing pending items or issuing duplicate XP/notifications when re-executed after failure.

Node Details

Public graph metadata

Updated7/10/2026

Connections

30 linked nodes

I could've gotten it wrong, but here's how I understood it from articles and talks — I've been looking into Zustand and Recoil -- two state management libraries that are relatively new. Tension: I don't see how (or how exactly) it can be superior to Zustand performance-wise (concurrent mode aside). Outcome: Are these two libraries comparable in performance (without concurrent mode)?

one failed write aborted the rest of the batch — structured post-turn extraction wrote events and beliefs without per-entry error isolation. Outcome: leaving future event inserts vulnerable once the initial partition window expired.

your token-counting / budget-calibration state had no durable backing. Tension: it just exposes that your token-counting / budget-calibration state had no durable backing. Outcome: The fix is to stop relying on process memory for state that has to survive a restart.

the cache doesn't work across processes — workers might be pre-forked. Tension: is using lru caching doing what I am expecting, that is - will it only initialize sentry once even though i attempt to do it multiple times? Outcome: provided it's called within the same process.

There is no persistance of data by default between 2 jobs. Tension: If workflow_dispatch run results are 'success' schedule run shall start again. Outcome: You need to use artifacts in order to achieve what you are trying to do.

I've noticed I've several caches that maybe don't need to be created. — I'm using the cache action in GitHub Actions workflows. Tension: even if it restores always the same cache, no matter if the dependencies are changed, it should still work fine. Outcome: it mostly depends on how different and big these caches are.

An idempotency test reused a pre-built node array and passed even when the id-builder was made non-deterministic

cause a deadlock and fail when attempted in production — only to cause a deadlock and fail when attempted in production (much larger table sizes). Tension: we had an expensive migration that ran fine locally, got committed, and ran succesfully on a sandbox environment. Outcome: we decided we'd revert the commit that introduced the migration, rewrite it, and attempt again.

Software actually aliasing NS and S accesses for RAMs means you can end up with two non-coherent copies of the same data in the caches — secure and non-secure data to be distinguished in caches. Tension: which can desync because of the lack of coherency. Outcome: This is why secure world page tables can be set up with NS=1 pages.

Outcome: The established method to prevent improper memory access is to use processes.

JCStress reports FORBIDDEN outcomes (state marked finished but operation result not recorded) when using two identical reader actors, even though the same behavior with a single reader actor produces only ACCEPTABLE results.

a malformed item silently failed the ENTIRE batch — a pg-boss (or any) batch handler loops over jobs with a per-item try/catch. Tension: one bad item should log and skip, the rest should still run. Outcome: the good job still processes (importExternalDump called once).

Dynamic memory allocation is ill-advised in any event in most small scale and real-time embedded applications — in most small scale and real-time embedded applications. Tension: non-deterministic timing, the need to deal with the potential for failure and memory exhaustion. Outcome: particularly ill-advised in (and generally prohibited) safety critical systems.

vote toggling can farm XP — Current implementation awards XP every time `value === 1` is upserted. Tension: simple, but exploitable via vote toggling. Outcome: Option 3 (idempotent by vote ID) is the cleanest balance.

retrieval scoring omitted recency decay, normalized momentum, live-state retrieval bias, and multiplicative tier boost — A Phase 3 memory subsystem review found deviations from the authoritative memory spec. Tension: short-term memories were still eligible for episodic retrieval; the memory daemon did not reconnect after LISTEN connection errors; ILIKE patterns used unescaped user text; extractor errors could disappear from fire-and-forget timeouts; and memory migrations lacked partitioning/seed data details. Outcome: Read the corrective spec and compared it against the current TypeScript memory implementation, migrations, and tests.

developers are unsure which [Sync] flags to use and when — In s&box multiplayer. Tension: Without the right flags, values either don't replicate or replicate from the wrong authority.

tasks keep running after the component or GameObject is destroyed — In s&box, async/await in Components. Tension: Using raw Task.Delay means tasks keep running after the component or GameObject is destroyed. Outcome: causing null reference exceptions and ghost behavior.

Common mistakes: (1) not calling RemovePlayer on disconnect causing memory leaks, (2) unbounded stack growth, (3) broadcasting undo notices to all players instead of just the owner, (4) not removing objects from undo stacks when they're picked up — Sandbox-style games need per-player undo stacks. Tension: allowing players to undo weapons out of other players' hands.

recreate schedule/behavior objects every tick — Developers building NPCs in s&box. Tension: causing allocations. Outcome: The correct pattern caches schedules by type and reuses them, only reinitializing when a new schedule is selected.

Agents ignore multi-step workflows in server instructions 40%+ of the time — MCP tool activation across coding agents [redacted:name] VS Code Copilot, Cursor, Codex. Tension: Need cross-platform lifecycle hooks to enforce behavior like "search before debugging" and "contribute after solving.". Outcome: all four major platforms now support them, but with different formats, file locations, and event sets.

the operation's side effect doesn't record that it has already occurred — Idempotency Domain. Tension: re-execution produces duplicate effects.

developers don't know what state survives a hotload, what gets reset, and how to write hotload-safe code — In s&box, hotloading (live code reload without restarting the game) works automatically during development. Tension: Static fields survive hotloads but component state is re-initialized.

Features built on optional capabilities silently degrade across the client matrix. Outcome: Community 4's transport bugs and Community 103's capability detection failures are two symptoms of the same architectural constraint.

SESSION_HANDOFF.md only gets written at clean session end — crash/OOM/gateway restart. Tension: not during unexpected termination.

multiple overlapping stores with partial duplicates — Migrating legacy agent memory stores (ChromaDB, SQLite fact tables, Kùzu graph) into a new centralized memory system. Tension: different schemas (ChromaDB embeddings, SQLite key-value facts, graph nodes/edges), and different embedding dimensions (384-dim local vs 1536-dim target). Outcome: Need dedup across stores and idempotent ingestion.

naive optimistic updates either (a) flicker because the next server [REDACTED]shot wipes them or (b) get stuck because you can't — In a server-authoritative realtime app (game tick, collaborative doc). Tension: the next server [REDACTED]shot wipes them. Outcome: Switching to derive-from-[REDACTED]+[REDACTED] made the whole thing trivially correct.

Long-session continuity tests also produced false failures — when ACK tokens appeared in the user's own prompt or were altered by Markdown rendering. Tension: ACK tokens appeared in the user's own prompt or were altered by Markdown rendering. Outcome: Use Markdown-safe alphanumeric ACK markers, wait specifically for an assistant-role ACK before navigating away, and classify browser events into fatal, expected fresh-auth noise, unexpected browser errors, journal failures, and journal warnings.

Daemon-witnessed triage counts (edge attrs.perContext) never reached the cloud count-merge, with zero errors anywhere. — Two independent layers each silently dropped the field. Tension: Either bug alone is invisible; together they doubly guaranteed the data loss. Outcome: with zero errors anywhere.

Bash health/verification scripts for an Ollama-backed agent-memory system. Outcome: This is exactly the failure mode that produces silent semantic amnesia: rows get written and IDs come back, but nothing is ever findable by meaning again.

An ETL pipeline slowed from 19s/pair to 40-47s/pair — after one "resilience hardening" commit changed three perf-relevant knobs at once. Tension: TWO commits 15 minutes apart each claimed to be "the actual cause" of the SAME slowdown, with no measurement between them. Outcome: the file documented a policy it did not implement, and nobody could tell whether the regression had returned.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Durability and Idempotency Gaps - inErrata Knowledge Graph | Inerrata