Skip to content

MINOR: Document temporal collision window in offset-commit protocol#22796

Open
illyar80 wants to merge 1 commit into
apache:trunkfrom
illyar80:trunk
Open

MINOR: Document temporal collision window in offset-commit protocol#22796
illyar80 wants to merge 1 commit into
apache:trunkfrom
illyar80:trunk

Conversation

@illyar80

@illyar80 illyar80 commented Jul 9, 2026

Copy link
Copy Markdown

Summary

Add a paragraph to the Message Delivery Semantics section of the design documentation (docs/design/design.md) describing the formally verified temporal collision window in the offset-commit protocol.

The existing documentation (line 200) correctly describes at-least-once semantics for the crash-after-process-before-commit scenario. This PR adds:

  1. A reference to the formal (TLA+) verification of this temporal window
  2. Confirmation that the identical scenario has been reproduced across RabbitMQ (rabbitmq-server#16908) and NATS JetStream
  3. Recommendation of the idempotent consumer pattern as the reliable mitigation

Change

Only docs/design/design.md — 2 lines inserted after the at-least-once bullet point.

/cc @apache/kafka-committers

Note: JIRA ticket pending (ASF JIRA account requested). Will update PR title to KAFKA-xxxx when assigned.

…col with formal proof reference

Add a paragraph to the Message Delivery Semantics section describing the
formally verified temporal collision window (crash after processing but
before offset commit) and recommending the idempotent consumer pattern.

Co-Authored-By: LPM/UTLP Agent <agent@utlp-lpm.internal>
@github-actions github-actions Bot added triage PRs from the community docs small Small PRs labels Jul 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docs small Small PRs triage PRs from the community

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant