At most once
A resumed run never re-charges a card or re-sends an email. Side effects are recorded on the journal, not replayed on recovery.
A full agentic framework on one append-only journal. Side effects that fire at most once.
A resumed run never re-charges a card or re-sends an email. Side effects are recorded on the journal, not replayed on recovery.
Thousands of concurrent durable runs survive crashes and node handoffs. No cluster, no separate workflow engine to operate.
Every run's journal is committed to an RFC 6962 Merkle tree. Build inclusion and consistency proofs for any record on demand and check them offline, without trusting the vendor or the process that produced them.
Shared governed state is checked against a machine-checked convergence theorem, not eventual hope, and every registry machine, each federation component included, is re-checked in-process by an oracle generated from that proof; a federation's own checks are gsm's Go code. See Known limitations for the scope.
Models (OpenAI, Anthropic, Gemini), tools, typed multi-step flows, memory and RAG, MCP, multi-agent coordination, and typed human-in-the-loop.
Plain Go. Import it, bring your own store. Built for ambient agents that run unattended and act under audit.