openfeature-sdk 0.7.1 → 0.8.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bf1041c34e962f832b25f1be3e9eeab7fee3fd4272dc9e1e0e8dabe85b6d21e8
-  data.tar.gz: f45667a6a898d3521ea87c31aea62491ace0682c72ef2cfa2a16d5f8a0f3f0b5
+  metadata.gz: cf021dbf998f01e1b0f6e69723e65e32b7f5d36e91381963988af89daabcbfd9
+  data.tar.gz: bbe22d9c478d5e2608d888d8a627dcdf3477b99f31b9b5114fce071fa18fb669
 SHA512:
-  metadata.gz: 393adb8b637763e5b397f6ee702017705bf355c8785ceb1280aa4f95b585a061f8da6e4a6d67ed9e8ab20de1f341b36d4dc3febb38dbbcc7a41a68cfb8002b8c
-  data.tar.gz: d145cc98fb609aa75ad06485d4486cc6aec19ea953cd627f9f71b33e991fafd3a57fa139fbe07f878e5bc105885ce35a74c0ab12485e50649d63b79a100eec98
+  metadata.gz: 417abbc5e8c3e216e5bfd6299bad2f4f46396ed7e3e2a712c7e1a9c92639fa82cde9a904616854428ad54de10986e8537183b6a5efc959e3c7350943874e7a37
+  data.tar.gz: e715404890c82fd6b36b3d7c965a6c0e4eea06c80973ca25f3932aba943636ceb5addfe46ce06fdd59de4d5332e704e29dcb28f16ad7a690869b4da94a217524

data/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.7.1"
+  ".": "0.8.1"
 }

data/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.8.1](https://github.com/open-feature/ruby-sdk/compare/v0.8.0...v0.8.1) (2026-10-23)
+
+
+### Bug Fixes
+
+* close the spec v0.9.0 gaps the compliance audit found ([#361](https://github.com/open-feature/ruby-sdk/issues/361)) ([1ecbb58](https://github.com/open-feature/ruby-sdk/commit/1ecbb58d52a26cdc6c2e187bdf61d037d7309b20))
+
+## [0.8.0](https://github.com/open-feature/ruby-sdk/compare/v0.7.1...v0.8.0) (2026-10-23)
+
+
+### ⚠ BREAKING CHANGES
+
+* make hook inputs immutable ([#357](https://github.com/open-feature/ruby-sdk/issues/357))
+
+### Bug Fixes
+
+* do not mutate the provider's ResolutionDetails ([#358](https://github.com/open-feature/ruby-sdk/issues/358)) ([ec657a5](https://github.com/open-feature/ruby-sdk/commit/ec657a5fc7b1514828ea2fa1cb6bfe017029f5af))
+* make hook inputs immutable ([#357](https://github.com/open-feature/ruby-sdk/issues/357)) ([9e166fe](https://github.com/open-feature/ruby-sdk/commit/9e166fe09ec2a10d220295b600141cb351516b24))
+
 ## [0.7.1](https://github.com/open-feature/ruby-sdk/compare/v0.7.0...v0.7.1) (2026-10-23)
 
 

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    openfeature-sdk (0.7.1)
+    openfeature-sdk (0.8.1)
 
 GEM
   remote: https://rubygems.org/

data/README.md

@@ -12,13 +12,13 @@
 <!-- x-hide-in-docs-end -->
 <!-- The 'github-badges' class is used in the docs -->
 <p align="center" class="github-badges">
-  <a href="https://github.com/open-feature/spec/releases/tag/v0.8.0">
-    <img alt="Specification" src="https://img.shields.io/static/v1?label=specification&message=v0.8.0&color=yellow&style=for-the-badge" />
+  <a href="https://github.com/open-feature/spec/releases/tag/v0.9.0">
+    <img alt="Specification" src="https://img.shields.io/static/v1?label=specification&message=v0.9.0&color=yellow&style=for-the-badge" />
   </a>
   <!-- x-release-please-start-version -->
 
-  <a href="https://github.com/open-feature/ruby-sdk/releases/tag/v0.7.1">
-    <img alt="Release" src="https://img.shields.io/static/v1?label=release&message=v0.7.1&color=blue&style=for-the-badge" />
+  <a href="https://github.com/open-feature/ruby-sdk/releases/tag/v0.8.1">
+    <img alt="Release" src="https://img.shields.io/static/v1?label=release&message=v0.8.1&color=blue&style=for-the-badge" />
   </a>
 
   <!-- x-release-please-end -->
@@ -506,6 +506,12 @@ class MyProvider
     # Return value is ignored
   end
 
+  # Optional: hooks the SDK runs on every evaluation that uses this provider (spec 2.3.1).
+  # They run after API, client and invocation hooks in the before stage, and first in the after, error and finally stages.
+  def hooks
+    []
+  end
+
   def fetch_boolean_value(flag_key:, default_value:, evaluation_context: nil)
     # Retrieve a boolean value from provider source
     # To signal an error, return ResolutionDetails with an error_code, or raise
@@ -566,6 +572,12 @@ class MyLoggingHook
 end
 ```
 
+Hooks can read the hook context and hints but not change them:
+
+- Only `before` hooks can change the evaluation context: return an `EvaluationContext` for the SDK to merge in, or assign `hook_context.evaluation_context`. By the time `after`, `error` and `finally` run, it's a deep-frozen copy, so assigning it or changing its values raises `FrozenError`. Your own context isn't frozen.
+- The flag key, the default value, the hints, and the client and provider metadata are frozen copies. Your own objects aren't frozen.
+- Only the spec's value types are copied: strings, numbers, booleans, times, hashes and arrays. Other objects, such as a user or a record you put in the context, are passed to hooks as they are. A time is copied but left unfrozen, so `utc` and `localtime` still work, and a hash's default proc isn't copied.
+
 > Built a new hook? [Let us know](https://github.com/open-feature/openfeature.dev/issues/new?assignees=&labels=hook&projects=&template=document-hook.yaml&title=%5BHook%5D%3A+) so we can add it to the docs!
 
 <!-- x-hide-in-docs-start -->

data/lib/open_feature/sdk/api.rb

@@ -30,7 +30,7 @@ module OpenFeature
     # If no provider is specified, the <tt>NoOpProvider</tt> is set as the default <tt>Provider</tt>.
     # Once the SDK has been configured, a client can be built
     #
-    #   client = OpenFeature::SDK::API.instance.build_client(name: 'my-open-feature-client')
+    #   client = OpenFeature::SDK::API.instance.build_client(domain: 'my-open-feature-client')
     class API
       include Singleton # Satisfies Flag Evaluation API Requirement 1.1.1; Isolated.create_api builds others (1.8.1)
       extend Forwardable

data/lib/open_feature/sdk/client.rb

@@ -58,7 +58,8 @@ module OpenFeature
         built_context = build_evaluation_context(evaluation_context)
 
         provider.track(tracking_event_name, evaluation_context: built_context, tracking_event_details: tracking_event_details)
-      rescue StandardError, NotImplementedError
+        nil # Spec 6.1.1.1: returns nothing
+      rescue *RECOVERABLE_ERRORS
         nil
       end
 
@@ -134,12 +135,12 @@ module OpenFeature
           executor.run_short_circuit(ordered_hooks: ordered_hooks, hook_context: hook_context, hints: hints, evaluation_details: evaluation_details)
           evaluation_details
         else
-          executor.execute(ordered_hooks: ordered_hooks, hook_context: hook_context, hints: hints) do |hctx|
+          executor.execute(ordered_hooks: ordered_hooks, hook_context: hook_context, hints: hints, default_value:) do |hctx|
             evaluate_flag(provider: provider, type: type, flag_key: flag_key, default_value: default_value, evaluation_context: hctx.evaluation_context)
           end
         end
-      rescue StandardError, NotImplementedError => e
-        # Spec 1.4.10 and 1.4.11: report through the details, never raise or log. NotImplementedError is the abstract-method idiom.
+      rescue *RECOVERABLE_ERRORS => e
+        # Spec 1.4.10 and 1.4.11: report through the details, never raise or log
         resolution = Provider::ResolutionDetails.new(
           value: default_value,
           error_code: EvaluationError.code_for(e),
@@ -157,11 +158,16 @@ module OpenFeature
           evaluation_context: evaluation_context
         )
 
-        if resolution_details.error_code || TYPE_CLASS_MAP[type].none? { |klass| resolution_details.value.is_a?(klass) }
-          resolution_details.value = default_value
-          resolution_details.error_code ||= Provider::ErrorCode::TYPE_MISMATCH
-          resolution_details.reason = Provider::Reason::ERROR
-          resolution_details.variant = nil
+        provider_error = resolution_details.error_code
+        if provider_error || TYPE_CLASS_MAP[type].none? { |klass| resolution_details.value.is_a?(klass) }
+          # A new struct, since a provider may cache and reuse the one it returned
+          resolution_details = Provider::ResolutionDetails.new(
+            value: default_value,
+            reason: Provider::Reason::ERROR,
+            error_code: provider_error || Provider::ErrorCode::TYPE_MISMATCH,
+            error_message: provider_error ? resolution_details.error_message : "Expected #{type}, got #{resolution_details.value.class}",
+            flag_metadata: resolution_details.flag_metadata
+          )
         end
 
         EvaluationDetails.new(flag_key: flag_key, resolution_details: resolution_details)

data/lib/open_feature/sdk/configuration.rb

@@ -110,7 +110,7 @@ module OpenFeature
           @provider_state_registry.set_initial_state(prov, ProviderState::NOT_READY)
           prov.send(:detach) if prov.is_a?(Provider::EventEmitter)
           prov.shutdown if prov.respond_to?(:shutdown)
-        rescue => e
+        rescue *RECOVERABLE_ERRORS => e
           @logger&.warn("Error shutting down provider #{prov&.class&.name || "unknown"}: #{e.message}")
         end
 
@@ -165,7 +165,8 @@ module OpenFeature
             # First, so a provider registered with another API (1.8.4) leaves no state behind
             provider.send(:attach, self) if provider.is_a?(Provider::EventEmitter)
             attempt = @init_attempts[provider] = InitAttempt.new(:running, nil, Thread::Queue.new)
-            @provider_state_registry.set_initial_state(provider)
+            # Spec 2.8.5.1: a provider without init is READY from registration
+            @provider_state_registry.set_initial_state(provider, has_init ? ProviderState::NOT_READY : ProviderState::READY)
           end
 
           # Publish last: clients read @providers without the lock, and must not see an untracked provider
@@ -184,30 +185,42 @@ module OpenFeature
           end
         end
 
-        # Shutdown old provider outside mutex to avoid blocking other operations
-        if needs_shutdown
-          begin
-            old_provider.shutdown if old_provider.respond_to?(:shutdown)
-          rescue => e
-            @logger&.warn("Error shutting down previous provider #{old_provider&.class&.name || "unknown"}: #{e.message}")
+        begin
+          # Spec 2.8.5.1: a provider without init is READY from registration, so its READY handlers run now, before the
+          # old provider's shutdown; after it, a handler added during the shutdown would run twice
+          unless has_init
+            if needs_init
+              init_provider(provider, context_for_init, domain:, attempt:, raise_on_error: wait_for_init)
+              raise incomplete_init_error(provider, "initialization did not complete") if wait_for_init && attempt.state != :succeeded
+            elsif !old_provider.equal?(provider)
+              # Each new binding runs its domain's READY handlers
+              dispatch_provider_event(provider, ProviderEvent::PROVIDER_READY, token: attempt)
+            end
+          end
+        ensure
+          # Shutdown old provider outside mutex to avoid blocking other operations. Checked again, since a READY
+          # handler above may have bound it again (a rollback)
+          if needs_shutdown && !provider_bound?(old_provider)
+            begin
+              old_provider.shutdown if old_provider.respond_to?(:shutdown)
+            rescue *RECOVERABLE_ERRORS => e
+              @logger&.warn("Error shutting down previous provider #{old_provider&.class&.name || "unknown"}: #{e.message}")
+            end
           end
         end
+        return unless has_init
 
         # Initialize provider outside the mutex to avoid blocking other operations
         if needs_init
-          # Spec 2.8.5.1: a provider without init is READY, and its handlers have run, when set_provider returns
-          if wait_for_init || !has_init
-            init_provider(provider, context_for_init, domain:, attempt:, raise_on_error: wait_for_init)
+          if wait_for_init
+            init_provider(provider, context_for_init, domain:, attempt:, raise_on_error: true)
             # Replaced or shut down while init ran: fail like the waiters on this attempt did
-            raise incomplete_init_error(provider, "initialization did not complete") if wait_for_init && attempt.state != :succeeded
+            raise incomplete_init_error(provider, "initialization did not complete") if attempt.state != :succeeded
           else
             init_thread = Thread.new do
               init_provider(provider, context_for_init, domain:, attempt:, raise_on_error: false)
             end
           end
-        elsif !has_init
-          # Spec 2.8.5.1: each new binding of a provider without init runs its domain's READY handlers
-          dispatch_provider_event(provider, ProviderEvent::PROVIDER_READY, token: attempt) unless old_provider.equal?(provider)
         elsif wait_for_init
           # Already registered: wait for an init still in flight, then report its outcome.
           # From inside that init (e.g. a handler of an event it emits) the wait could never end.
@@ -232,7 +245,7 @@ module OpenFeature
         # An abandoned attempt (provider replaced or shut down meanwhile) reports no READY.
         # Spec 2.8.2/2.8.3: a provider that emits its own lifecycle events gets no synthetic READY or ERROR
         dispatch_provider_event(provider, ProviderEvent::PROVIDER_READY, token: attempt) if finish_init_attempt(attempt, :succeeded) && !emits_lifecycle_events
-      rescue => e
+      rescue *RECOVERABLE_ERRORS => e
         # Spec 1.7.5: PROVIDER_FATAL from init makes the provider FATAL
         error_code = EvaluationError.code_for(e)
         error = ProviderInitializationError.new(
@@ -250,7 +263,7 @@ module OpenFeature
 
         raise error if raise_on_error
       ensure
-        # Reached unsettled only when init raised something other than a StandardError
+        # Reached unsettled only when init raised something not in RECOVERABLE_ERRORS, such as an Interrupt
         finish_init_attempt(attempt, :failed)
       end
 
@@ -296,7 +309,7 @@ module OpenFeature
           until queue.empty?
             begin
               deliver_provider_event(provider, *queue.shift)
-            rescue => e
+            rescue *RECOVERABLE_ERRORS => e
               # Its own emitter already returned, so log rather than fail the event that was dispatching
               @logger&.error("Queued provider event failed: #{e.message}")
             end
@@ -405,7 +418,7 @@ module OpenFeature
 
         handlers.each do |handler|
           handler.call(event_details)
-        rescue => e
+        rescue *RECOVERABLE_ERRORS => e
           @logger&.error("Client event handler failed: #{e.message}")
         end
       end
@@ -430,7 +443,7 @@ module OpenFeature
 
               begin
                 handler.call(event_details)
-              rescue => e
+              rescue *RECOVERABLE_ERRORS => e
                 @logger&.error("Immediate API event handler failed: #{e.message}")
               end
             end
@@ -447,7 +460,7 @@ module OpenFeature
 
             begin
               handler.call(event_details)
-            rescue => e
+            rescue *RECOVERABLE_ERRORS => e
               @logger&.error("Immediate client event handler failed: #{e.message}")
             end
           end

data/lib/open_feature/sdk/evaluation_context.rb

@@ -26,6 +26,16 @@ module OpenFeature
         )
       end
 
+      def initialize_copy(source)
+        super
+        @fields = @fields.dup
+      end
+
+      def freeze
+        fields.freeze
+        super
+      end
+
       def ==(other)
         fields == other.fields
       end

data/lib/open_feature/sdk/evaluation_error.rb

@@ -4,6 +4,10 @@ require_relative "provider/error_code"
 
 module OpenFeature
   module SDK
+    # What the SDK reports or logs, rather than raises, when provider, hook or handler code fails.
+    # NotImplementedError isn't a StandardError, but it's Ruby's abstract-method idiom; Interrupt and the rest still propagate.
+    RECOVERABLE_ERRORS = [StandardError, NotImplementedError].freeze
+
     # Raised by a provider to signal an evaluation error with an OpenFeature
     # error code (spec 2.2.7). Any exception responding to +error_code+ is
     # honored the same way.

data/lib/open_feature/sdk/event_dispatcher.rb

@@ -55,7 +55,7 @@ module OpenFeature
         # Call handlers outside of mutex to avoid deadlocks
         handlers_to_call.each do |handler|
           handler.call(event_details)
-        rescue => e
+        rescue *RECOVERABLE_ERRORS => e
           @logger&.warn "Event handler failed for #{event_type}: #{e.message}\n#{e.backtrace.join("\n")}"
         end
       end

data/lib/open_feature/sdk/frozen_copy.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module OpenFeature
+  module SDK
+    # Deep-frozen copies of the spec's value types (spec 3.1.2), so whoever gets one can't change it and the original is
+    # never frozen (spec 1.4.15.1, 4.1.3, 4.1.4.1, 4.2.2)
+    module FrozenCopy
+      def self.of(value, seen = nil)
+        return value if defined?(Ractor) && Ractor.shareable?(value)
+
+        case value
+        when String then value.frozen? ? value : value.dup.freeze
+        when Time then value.dup # Left unfrozen: utc and localtime convert in place, and on a copy they touch nothing else
+        when Hash, Array
+          seen ||= {}.compare_by_identity
+          return seen[value] if seen.key?(value)
+
+          # Registered before its items, so a cycle or a shared structure maps to this one copy
+          copy = seen[value] = value.dup
+          if copy.is_a?(Hash)
+            if copy.default_proc
+              copy.default_proc = nil # Behavior rather than data, and on a frozen copy one that stores would raise
+            elsif !copy.default.nil?
+              copy.default = of(copy.default, seen)
+            end
+            copy.transform_values! { |item| of(item, seen) }
+          else
+            copy.map! { |item| of(item, seen) }
+          end
+          copy.freeze
+        else
+          value # Anything else, like a user object or a record, is passed through as is
+        end
+      end
+    end
+  end
+end

data/lib/open_feature/sdk/hooks/hints.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require "delegate"
+require_relative "../frozen_copy"
 
 module OpenFeature
   module SDK
@@ -13,8 +14,7 @@ module OpenFeature
             assert_allowed_key(key)
             assert_allowed_value(value)
           end
-          @hash = hash.dup
-          super(@hash)
+          super(FrozenCopy.of(hash))
           freeze
         end
 

data/lib/open_feature/sdk/hooks/hook.rb

@@ -14,17 +14,17 @@ module OpenFeature
           nil
         end
 
-        # Called after successful flag evaluation (spec 4.3.3).
+        # Called after successful flag evaluation (spec 4.3.6).
         def after(hook_context:, evaluation_details:, hints:)
           nil
         end
 
-        # Called when an error occurs during flag evaluation (spec 4.3.6).
+        # Called when an error occurs during flag evaluation (spec 4.3.7).
         def error(hook_context:, exception:, hints:)
           nil
         end
 
-        # Called unconditionally after flag evaluation (spec 4.3.7).
+        # Called unconditionally after flag evaluation (spec 4.3.8).
         def finally(hook_context:, evaluation_details:, hints:)
           nil
         end

data/lib/open_feature/sdk/hooks/hook_context.rb

@@ -1,28 +1,48 @@
 # frozen_string_literal: true
 
+require_relative "../frozen_copy"
+
 module OpenFeature
   module SDK
     module Hooks
       # Provides context to hook stages during flag evaluation.
       #
-      # Per spec 4.1.1-4.1.5:
+      # Per spec 4.1.1-4.1.5 and 4.2.2:
       # - flag_key, flag_value_type, default_value are immutable (4.1.3)
-      # - client_metadata, provider_metadata are optional (4.1.2)
-      # - evaluation_context is mutable (for before hooks to modify, 4.1.4.1)
+      # - client_metadata, provider_metadata are optional (4.1.2) and immutable (4.2.2.2, 4.2.2.3)
+      # - evaluation_context is mutable only in before hooks; HookExecutor freezes the hook context after them (4.1.4.1)
       class HookContext
-        attr_reader :flag_key, :flag_value_type, :default_value,
-          :client_metadata, :provider_metadata
-        attr_accessor :evaluation_context
+        attr_reader :flag_key, :flag_value_type, :client_metadata, :provider_metadata
+        attr_writer :evaluation_context
 
         def initialize(flag_key:, flag_value_type:, default_value:, evaluation_context:,
           client_metadata: nil, provider_metadata: nil)
-          @flag_key = flag_key.freeze
+          @flag_key = FrozenCopy.of(flag_key)
           @flag_value_type = flag_value_type.freeze
-          @default_value = default_value.freeze
+          @source_default_value = default_value
           @evaluation_context = evaluation_context
           @client_metadata = client_metadata
-          @provider_metadata = provider_metadata
+          @provider_metadata = frozen_metadata(provider_metadata)
           @hook_data = {}
+          @copies = {}
+        end
+
+        # Copied on first read: most hooks never read it, and the copy grows with the value
+        def default_value
+          @copies.fetch(:default_value) { @copies[:default_value] = FrozenCopy.of(@source_default_value) }
+        end
+
+        # Live during the before stage; once frozen, a deep-frozen copy made on first read, so neither the caller's
+        # context nor one a before hook assigned is frozen
+        def evaluation_context
+          return @evaluation_context unless frozen?
+
+          @copies.fetch(:evaluation_context) do
+            @copies[:evaluation_context] = @evaluation_context&.dup&.tap do |copy|
+              seen = {}.compare_by_identity # One map for every field, so a structure two fields share is copied once
+              copy.fields.transform_values! { |value| FrozenCopy.of(value, seen) }
+            end&.freeze
+          end
         end
 
         # Returns a mutable hash scoped to the given hook instance.
@@ -31,6 +51,15 @@ module OpenFeature
         def hook_data_for(hook)
           @hook_data[hook.object_id] ||= {}
         end
+
+        private
+
+        # FrozenCopy passes Structs through, so ProviderMetadata's members are copied here (spec 4.2.2.3)
+        def frozen_metadata(metadata)
+          return metadata if !metadata.is_a?(Struct) || (defined?(Ractor) && Ractor.shareable?(metadata))
+
+          metadata.dup.tap { |copy| copy.each_pair { |member, value| copy[member] = FrozenCopy.of(value) } }.freeze
+        end
       end
     end
   end

data/lib/open_feature/sdk/hooks/hook_executor.rb

@@ -13,6 +13,9 @@ module OpenFeature
       #   - Before/after hook error → stop remaining hooks, run error hooks, return default
       #   - Error hook error → log, continue remaining error hooks
       #   - Finally hook error → log, continue remaining finally hooks
+      #
+      # The hook context is frozen before after, error and finally hooks run, so only before hooks
+      # can change the evaluation context (spec 4.1.4.1). Not earlier: some providers write to it.
       class HookExecutor
         def initialize(logger: nil)
           @logger = logger
@@ -37,16 +40,17 @@ module OpenFeature
         # @param ordered_hooks [Array] hooks in before-order (API, Client, Invocation, Provider)
         # @param hook_context [HookContext] the hook context
         # @param hints [Hints] hook hints
+        # @param default_value [Object] returned if evaluation raises; the caller's own object, not the hooks' frozen copy
         # @param evaluate_block [Proc] the flag evaluation to wrap
         # @return [EvaluationDetails] the evaluation result
-        def execute(ordered_hooks:, hook_context:, hints:, &evaluate_block)
+        def execute(ordered_hooks:, hook_context:, hints:, default_value:, &evaluate_block)
           evaluation_details = nil
 
           begin
             run_before_hooks(ordered_hooks, hook_context, hints)
             evaluation_details = evaluate_block.call(hook_context)
 
-            # Spec 4.3.6: If evaluation resulted in an error (e.g. FLAG_NOT_FOUND,
+            # Spec 4.3.7: If evaluation resulted in an error (e.g. FLAG_NOT_FOUND,
             # TYPE_MISMATCH), run error hooks instead of after hooks.
             if evaluation_details.error_code
               error = EvaluationError.new(evaluation_details.error_message, error_code: evaluation_details.error_code)
@@ -54,13 +58,13 @@ module OpenFeature
             else
               run_after_hooks(ordered_hooks, hook_context, evaluation_details, hints)
             end
-          rescue StandardError, NotImplementedError => e
+          rescue *RECOVERABLE_ERRORS => e
             run_error_hooks(ordered_hooks, hook_context, e, hints)
 
             evaluation_details = EvaluationDetails.new(
               flag_key: hook_context.flag_key,
               resolution_details: Provider::ResolutionDetails.new(
-                value: hook_context.default_value,
+                value: default_value,
                 error_code: EvaluationError.code_for(e),
                 reason: Provider::Reason::ERROR,
                 error_message: e.message
@@ -91,6 +95,7 @@ module OpenFeature
 
         # Spec 4.4.2: After hooks run in reverse order: Provider → Invocation → Client → API
         def run_after_hooks(hooks, hook_context, evaluation_details, hints)
+          hook_context.freeze
           hooks.reverse_each do |hook|
             next unless hook.respond_to?(:after)
             hook.after(hook_context: hook_context, evaluation_details: evaluation_details, hints: hints)
@@ -100,10 +105,11 @@ module OpenFeature
         # Spec 4.4.4: Error hooks run in reverse order.
         # If an error hook itself errors, log and continue remaining error hooks.
         def run_error_hooks(hooks, hook_context, exception, hints)
+          hook_context.freeze
           hooks.reverse_each do |hook|
             next unless hook.respond_to?(:error)
             hook.error(hook_context: hook_context, exception: exception, hints: hints)
-          rescue => e
+          rescue *RECOVERABLE_ERRORS => e
             @logger&.error("Error hook #{hook.class.name} failed: #{e.message}")
           end
         end
@@ -111,10 +117,11 @@ module OpenFeature
         # Spec 4.4.3: Finally hooks run in reverse order unconditionally.
         # If a finally hook errors, log and continue remaining finally hooks.
         def run_finally_hooks(hooks, hook_context, evaluation_details, hints)
+          hook_context.freeze
           hooks.reverse_each do |hook|
             next unless hook.respond_to?(:finally)
             hook.finally(hook_context: hook_context, evaluation_details: evaluation_details, hints: hints)
-          rescue => e
+          rescue *RECOVERABLE_ERRORS => e
             @logger&.error("Finally hook #{hook.class.name} failed: #{e.message}")
           end
         end

data/lib/open_feature/sdk/provider/resolution_details.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require_relative "../frozen_copy"
+
 module OpenFeature
   module SDK
     module Provider
@@ -7,14 +9,7 @@ module OpenFeature
 
       ResolutionDetails = Struct.new(:value, :reason, :variant, :error_code, :error_message, :flag_metadata, keyword_init: true) do
         def flag_metadata
-          raw = self[:flag_metadata]
-          if raw.nil?
-            EMPTY_FLAG_METADATA
-          elsif raw.frozen?
-            raw
-          else
-            raw.dup.freeze
-          end
+          FrozenCopy.of(self[:flag_metadata] || EMPTY_FLAG_METADATA)
         end
       end
     end

data/lib/open_feature/sdk/version.rb

@@ -2,6 +2,6 @@
 
 module OpenFeature
   module SDK
-    VERSION = "0.7.1"
+    VERSION = "0.8.1"
   end
 end

data/sig/open_feature/sdk/evaluation_context.rbs

@@ -13,6 +13,10 @@ module OpenFeature
 
       def merge: (EvaluationContext overriding_context) -> EvaluationContext
 
+      def initialize_copy: (EvaluationContext source) -> void
+
+      def freeze: () -> self
+
       def ==: (untyped other) -> bool
     end
   end

data/sig/open_feature/sdk/evaluation_error.rbs

@@ -1,5 +1,7 @@
 module OpenFeature
   module SDK
+    RECOVERABLE_ERRORS: Array[singleton(Exception)]
+
     class EvaluationError < StandardError
       attr_reader error_code: String
 

data/sig/open_feature/sdk/frozen_copy.rbs

@@ -0,0 +1,7 @@
+module OpenFeature
+  module SDK
+    module FrozenCopy
+      def self.of: (untyped value, ?Hash[untyped, untyped]? seen) -> untyped
+    end
+  end
+end

data/sig/open_feature/sdk/hooks/hook_context.rbs

@@ -4,14 +4,21 @@ module OpenFeature
       class HookContext
         attr_reader flag_key: String
         attr_reader flag_value_type: Symbol
-        attr_reader default_value: untyped
         attr_reader client_metadata: ClientMetadata?
         attr_reader provider_metadata: Provider::ProviderMetadata?
-        attr_accessor evaluation_context: EvaluationContext?
+        attr_writer evaluation_context: EvaluationContext?
 
         def initialize: (flag_key: String, flag_value_type: Symbol, default_value: untyped, evaluation_context: EvaluationContext?, ?client_metadata: ClientMetadata?, ?provider_metadata: Provider::ProviderMetadata?) -> void
 
+        def default_value: () -> untyped
+
+        def evaluation_context: () -> EvaluationContext?
+
         def hook_data_for: (untyped hook) -> Hash[untyped, untyped]
+
+        private
+
+        def frozen_metadata: (untyped metadata) -> untyped
       end
     end
   end

data/sig/open_feature/sdk/hooks/hook_executor.rbs

@@ -6,7 +6,7 @@ module OpenFeature
 
         def run_short_circuit: (ordered_hooks: Array[untyped], hook_context: HookContext, hints: Hints, evaluation_details: EvaluationDetails) -> void
 
-        def execute: (ordered_hooks: Array[untyped], hook_context: HookContext, hints: Hints) { (HookContext) -> EvaluationDetails } -> EvaluationDetails?
+        def execute: (ordered_hooks: Array[untyped], hook_context: HookContext, hints: Hints, default_value: untyped) { (HookContext) -> EvaluationDetails } -> EvaluationDetails?
 
         private
 

data/sig/open_feature/sdk/provider.rbs

@@ -20,6 +20,10 @@ module OpenFeature
         def domain_scoped?: () -> bool
       end
 
+      interface _HookProvider
+        def hooks: () -> Array[Hooks::_Hook]
+      end
+
       interface _TrackableProvider
         def track: (String tracking_event_name, ?evaluation_context: EvaluationContext?, ?tracking_event_details: TrackingEventDetails?) -> void
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: openfeature-sdk
 version: !ruby/object:Gem::Version
-  version: 0.7.1
+  version: 0.8.1
 platform: ruby
 authors:
 - OpenFeature Authors
@@ -49,6 +49,7 @@ files:
 - lib/open_feature/sdk/evaluation_details.rb
 - lib/open_feature/sdk/evaluation_error.rb
 - lib/open_feature/sdk/event_dispatcher.rb
+- lib/open_feature/sdk/frozen_copy.rb
 - lib/open_feature/sdk/hooks.rb
 - lib/open_feature/sdk/hooks/hints.rb
 - lib/open_feature/sdk/hooks/hook.rb
@@ -88,6 +89,7 @@ files:
 - sig/open_feature/sdk/evaluation_details.rbs
 - sig/open_feature/sdk/evaluation_error.rbs
 - sig/open_feature/sdk/event_dispatcher.rbs
+- sig/open_feature/sdk/frozen_copy.rbs
 - sig/open_feature/sdk/hooks/hints.rbs
 - sig/open_feature/sdk/hooks/hook.rbs
 - sig/open_feature/sdk/hooks/hook_context.rbs