Deferred work
Source of truth
Named-canary snapshot follow-ups (#645)
- Consider POST exact-list batches, host-declared snapshot profiles, asynchronous jobs, or stored snapshots only if adopters show that the bounded synchronous
GET /_appsurface/canariescontract is insufficient. - Keep polling, retry/backoff, CI exit codes, and GitHub reporting in the caller/workflow follow-up tracked by #625; the AppSurface package remains a current-proof producer, not a deployment controller.
- Revisit schema versioning or a generated client only after a stable external consumer demonstrates a compatibility need.
Durable runtime operations follow-ups (#641)
- Consider broker-backed activation only when a deployment requires scale-to-zero or a provider can preserve the existing bounded
IDurableRuntimePump.RunOnceAsynccontract. PostgreSQL remains authoritative; polling is the recovery path and metadata-only wake hints remain optional and advisory. - Consider an application-owned authorized operator dashboard or HTTP control surface only after an adopter identifies a real workflow that the typed health and drain APIs cannot serve. Do not add a Durable-owned endpoint or second operational timeline by default.
- Consider independently configured per-surface worker hosts when production latency evidence shows that one sequential Work/Flow/Schedule pass cannot meet a service objective. Keep the common runtime kernel and PostgreSQL claims/fences rather than adding local parallel fan-out.