发表机构
Platformatic Inc.（Platformatic公司）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
本文提出一种点对点复制持久工作流状态的架构，以认证的仅追加日志替代中心化日志，通过单写入者纪元核心、法定人数关闭证书和显式证书管理持久性，并定义了验证核心机制的对抗性实验。
AI 中文摘要
持久执行框架通常将长时间运行函数的执行步骤记录到日志中，并通过确定性重放来重建状态；因此，该日志是工作流的权威状态，在当前的部署中，它通常驻留在托管该运行的任何提供商处。本文探讨了如果该日志改为一个经过认证的、仅追加的日志，并在工作流的各方之间进行复制，会发生什么变化。我们提出了一种架构，其中运行是单写入者纪元核心的链；执行者的继任由法定人数最终确定的关闭证书管理；持久性、超时和检查点决策由显式证书承载，而非隐式信任；大型负载通过单独的内容寻址分发平面传输。威胁模型区分了签名所确立的内容（作者身份和顺序）与它们未确立的内容（记录效果的真实性）。我们将设计表述为一组类型化工件和不变量，识别哪些主张由现有系统确立，哪些是需要验证的提案，并定义了原型实验，包括特定的对抗性案例，这些实验将验证或否定该提案的核心机制。
英文摘要
Durable-execution frameworks commonly journal execution steps of a long-running function and reconstruct state by deterministic replay; the journal is therefore the workflow's authoritative state, and in current deployments it typically resides with whichever provider hosts the run. This paper examines what changes if the journal is instead an authenticated, append-only log replicated among the parties to the workflow. We propose an architecture in which runs are chains of single-writer epoch cores; executor succession is governed by quorum-finalized closure certificates; durability, timeout, and checkpoint decisions are carried by explicit certificates rather than implicit trust; and large payloads travel a separate content-addressed distribution plane. A threat model separates what signatures establish (authorship and order) from what they do not (truth of recorded effects). We state the design as a set of typed artifacts and invariants, identify which claims are established by existing systems and which are proposals requiring validation, and define the prototype experiments, including specific adversarial cases, that would validate or falsify the proposal's central mechanisms.
Comments51 pages, 8 figures
