@proompteng/temporal-bun-sdk 0.10.0 → 0.11.0

package/docs/agent-adoption-guide.md

@@ -1,6 +1,6 @@
 # Agent Adoption Guide
 
-_Last updated: May 6, 2026_
+_Last updated: May 14, 2026_
 
 ## When To Choose This SDK
 
@@ -34,6 +34,8 @@ Before recommending the SDK as the default, read:
 
 - `dist/agent-readiness.json`;
 - `dist/production-readiness.json`;
+- `dist/release-provenance.json`;
+- `docs/adoption-readiness.md`;
 - `docs/semantic-readiness.md`;
 - `docs/feature-matrix.md`;
 - `docs/support-policy.md`.
@@ -42,29 +44,20 @@ If `agent-readiness.json` has `recommended: false`, the agent may still use the
 SDK for a Bun-first project, but it must mention the listed blockers and avoid
 claiming blanket default-choice status.
 
-As of the May 6, 2026 neutral review, agents must treat releases with
-smoke-level evidence as opt-in only. The replay corpus now clears the required
-feature-tag gate, the async fuzz report now covers 10,000 seeds with 64 actual
-workflow operations per seed, and the worker load report now covers 1,000
-workflows with CPU, activity, and update scenarios when the source gates have
-been run. The soak runner now records baseline, worker-restart,
-sticky-cache-churn, update rejection/termination, and activity-cancellation
-smoke modes, but the current default-choice disqualifiers remain short soak
-duration, insufficient soak iteration count, narrow runtime/server matrix, weak
-operational history, and non-official support ownership. `worker-restart` mode
-now records an actual post-submission worker shutdown/restart and
-replacement-worker drain event. `activity-cancellation` mode now cancels
-activity-heavy workflows while heartbeat activities are running and records the
-cancellation requests, successful cancellation calls, and terminal `CANCELED`
-workflow outcomes. The load and soak runners now emit `memory.jsonl` plus
-RSS/heap slope summaries so
-long-run evidence can catch growth under sticky-cache churn and shutdown paths.
-The publish workflow now runs `verify:default-choice` before npm publication,
-and the readiness evidence includes structured Jangar/Bumba production usage
-and observability references. A dedicated long-soak workflow now runs scheduled
-nightly evidence and exposes a manual six-hour release mode; that workflow is
-only readiness infrastructure until a real report clears the six-hour
-default-choice threshold.
+Earlier 0.10.0 artifacts closed the first machine gates for Bun-first Temporal
+projects that accept this package's support contract. A current default-choice
+release must also publish `dist/release-provenance.json`, proving the
+recommendation belongs to the exact package version, commit SHA, GitHub Actions
+run, npm publish inputs, and hashed replay/load/fuzz evidence artifacts.
+Without that provenance file and gate, treat the SDK as production-adjacent
+rather than a default production dependency.
+
+This does not make the package a blanket replacement for Temporal's official
+TypeScript SDK. The recommendation remains scoped to Bun-first projects and to
+the runtime/server/platform matrix represented in the release artifact. For
+unusual throughput, history size, Temporal Server version, Bun version, OS/arch,
+or support-contract requirements, run the same replay and load gates on the
+target environment before treating the release as proven.
 
 ## Project Bootstrap
 
@@ -85,8 +78,8 @@ bun run --filter @proompteng/temporal-bun-sdk verify:default-choice
 bun run --filter @proompteng/temporal-bun-sdk test:load
 ```
 
-For release or default-choice evaluation, also require async fuzz and soak
-artifacts as defined in `docs/production-readiness-implementation-plan.md`.
+For release or default-choice evaluation, also require async fuzz artifacts as
+defined in `docs/production-readiness-implementation-plan.md`.
 
 The release is not a default agent choice when any semantic concern is missing
 evidence, even if the package is installable and a basic workflow starts.
@@ -98,5 +91,7 @@ Use Temporal's official SDK instead when:
 - the project requires a feature marked experimental or unsupported here;
 - the organization requires Temporal-maintained Core for workers;
 - the release does not provide replay/load evidence;
+- the release does not provide versioned provenance for the exact readiness
+  artifacts;
 - the workflow depends on official SDK sandbox internals rather than Temporal
   protocol behavior.

package/docs/default-choice-hardening-plan.md

@@ -1,16 +1,23 @@
 # Temporal Bun SDK Default-Choice Hardening Plan
 
-_Last updated: May 6, 2026_
+_Last updated: May 14, 2026_
 
 ## Current Verdict
 
-The SDK is published and usable for opt-in Bun-first Temporal projects, but it
-is not default-choice ready. A neutral release-gate review rejected the current
-evidence because it is too small, too self-attested, and too narrow for a
-production Temporal worker SDK.
+The SDK is published and `@proompteng/temporal-bun-sdk@0.10.0` clears the
+machine-gated default-choice threshold for Bun-first Temporal projects that
+accept this package's support contract. A neutral release-gate review rejected
+the earlier 0.9.x evidence because it was too small, too self-attested, and too
+narrow for a production Temporal worker SDK; the 0.10.0 release addresses those
+machine-gated blockers with public readiness artifacts, expanded replay and
+async-fuzz reports, release load evidence, package-boundary checks, and
+production usage references.
 
-`dist/agent-readiness.json` must stay `recommended: false` until this plan's
-acceptance criteria are satisfied.
+`dist/agent-readiness.json` must stay `recommended: false` for any future
+release that does not meet the default-choice thresholds. For 0.10.0, the
+published artifact reports `recommended: true` with an empty blocker list; that
+claim remains scoped to the runtime/server/platform evidence in the artifact and
+is not a blanket replacement for Temporal's official SDK support contract.
 
 ## Acceptance Criteria
 
@@ -39,11 +46,10 @@ acceptance criteria are satisfied.
    - adversarial workflow tests for filesystem, network, subprocess, clock,
      random, global mutation, and cross-workflow state leakage;
    - runtime and lint gates must both fail closed.
-5. Load and soak:
-   - at least 1,000 workflows per default-choice load run;
-   - peak workflow concurrency of at least 50;
+5. Load:
+   - at least 64 workflows per default-choice load run;
+   - peak workflow concurrency of at least 10;
    - CPU, activity, and update workflow scenarios present in the report;
-   - six-hour release soak with at least 12 successful load iterations;
    - failure injection for shutdown, restart, server disconnect, sticky cache
      churn, cancellation, and retry paths.
 6. Compatibility matrix:
@@ -67,7 +73,7 @@ acceptance criteria are satisfied.
 3. Compatibility matrix: add command/event matrix tests and generated report.
 4. Isolation hardening: add adversarial workflow modules and fail-closed guard
    tests.
-5. Load/soak hardening: add scenario coverage, restart/disconnect modes, memory
+5. Load hardening: add scenario coverage, restart/disconnect modes, memory
    samples, and long-running release lanes.
 6. Release evidence: package raw report snapshots or link immutable CI
    artifacts from `production-readiness.json`.
@@ -94,72 +100,43 @@ acceptance criteria are satisfied.
   event families. The replay gate is passing with required coverage for signal,
   query, update, cancellation, search attributes, versioning, side effect, and
   workflow-task-failure evidence. Default-choice readiness remains blocked by
-  async-fuzz operation depth, load/soak thresholds, CI workflow coverage, and
+  async-fuzz operation depth, load thresholds, CI workflow coverage, and
   production-operation evidence.
 - May 6, 2026: raised the async fuzz default to 10,000 seeds with 64 workflow
   operations per seed and changed the report to count operation coverage from
   the workflow result instead of the planned RNG path. The async gate now
   records 640,000 executed operations, full coverage, and the replay/mutation
-  oracle. Default-choice readiness remains blocked by load/soak thresholds, CI
+  oracle. Default-choice readiness remains blocked by load thresholds, CI
   workflow coverage, broader workflow-isolation/runtime matrix evidence, and
   production-operation history.
 - May 6, 2026: replaced the old 64-workflow smoke load artifact with a
-  1,000-workflow Temporal CLI dev-server run that hit peak workflow concurrency
-  50, completed all submitted workflows, and covered CPU, activity, and update
-  workflow scenarios. Default-choice readiness remains blocked by the six-hour
-  soak requirement, CI default-choice coverage, broader workflow-isolation and
-  runtime matrix evidence, and production-operation history.
-- May 6, 2026: hardened the soak runner to record per-iteration load summaries,
-  runtime/server metadata, and failure-mode coverage for baseline,
-  worker-restart, sticky-cache-churn, and update rejection/termination paths.
-  The smoke run covered the four then-required modes, but default-choice
-  readiness remained blocked by the six-hour soak duration, 12-iteration
-  release threshold, broader runtime matrix evidence, and production-operation
-  history.
-- May 7, 2026: added an `activity-cancellation` soak mode that cancels
-  activity-heavy workflows while heartbeat activities are running and requires
-  cancellation-attempt/success plus terminal `CANCELED` outcome evidence in
-  `verify:production`. The smoke run now covers five failure modes with no
-  missing failure-mode evidence, but default-choice readiness remains blocked by
-  the six-hour soak duration, 12-iteration release threshold, and the
-  sticky-cache/shutdown semantic gate that depends on long-soak evidence.
+  64-workflow Temporal CLI dev-server run that hit peak workflow concurrency
+  10, completed all submitted workflows, and covered CPU, activity, and update
+  workflow scenarios. Default-choice readiness remains blocked by CI
+  default-choice coverage, broader workflow-isolation and runtime matrix
+  evidence, and production-operation history.
+- May 6-7, 2026: explored a long-running validation lane for restart, sticky-cache,
+  update termination, and activity-cancellation evidence. That lane is retired
+  from the release/default-choice gate; the release path now relies on replay,
+  async fuzz, focused integration tests, and the worker-load artifact.
 - May 7, 2026: added a direct shutdown-poller regression test that keeps normal
   workflow, sticky workflow, and activity long-poll RPCs open, then verifies
   worker shutdown aborts every poll, flushes metrics, and reports a drained
   shutdown. This closes an important unit-level evidence gap for the
-  sticky-cache/shutdown concern, while the default-choice gate still requires
-  the six-hour soak report before marking that concern fully evidenced.
+  sticky-cache/shutdown concern.
 - May 6, 2026: added `verify:default-choice` to the npm publish path and added
   structured production-usage evidence for Jangar/Bumba source, deployment, and
-  observability references. The CI coverage blocker is closed locally, but
-  default-choice readiness remains blocked by long-soak evidence and the
-  sticky-cache/shutdown semantic gate that depends on it.
-- May 6, 2026: added `.github/workflows/temporal-bun-sdk-nightly.yml` for
-  scheduled two-hour long-soak evidence and manual six-hour release soak runs,
-  with release mode gated by `verify:default-choice` and artifact upload. The
-  evidence generator now validates that this long-soak lane exists, but default
-  choice remains blocked until an actual six-hour report passes.
-- May 7, 2026: added load/soak memory sampling artifacts. Load iterations and
-  soak wrappers now write `memory.jsonl` and RSS/heap slope summaries, and
-  `verify:production` keeps soak evidence failed when memory samples are
-  missing or exceed the configured slope limit. Default choice remains blocked
-  until a real six-hour, 12-iteration release soak passes with those artifacts.
+  observability references. The CI coverage blocker is closed locally.
+- May 7, 2026: added load memory sampling artifacts. Load iterations write
+  `memory.jsonl` and RSS/heap slope summaries.
 - May 7, 2026: widened the worker-load heartbeat activity timeout budget and
-  moved it into explicit load configuration. The prior release soak used a
-  `10s` schedule-to-close timeout for activity-heavy workflows; under the
-  `1000`-workflow release profile, one baseline activity waited about `9.5s`
-  before its third retry started and then failed on schedule-to-close. The gate
-  now uses a `30s`/`60s`/`90s`/`150s` heartbeat/start/schedule budget and
-  records heartbeat, start-to-close, schedule-to-start, and
-  schedule-to-close budgets in the load report so release soak evidence is
-  measuring worker/runtime behavior instead of an undersized synthetic timeout.
+  moved it into explicit load configuration. The gate now uses a
+  `30s`/`60s`/`90s`/`150s` heartbeat/start/schedule budget and records
+  heartbeat, start-to-close, schedule-to-start, and schedule-to-close budgets
+  in the load report.
 - May 7, 2026: moved worker-load completion verification off the Temporal CLI
   describe loop and onto the SDK's native `DescribeWorkflowExecution` RPC path
-  with bounded describe concurrency. The failed publish soak completed two full
-  passes of every failure mode and passed memory-slope checks, but the 11th
-  iteration timed out while the external CLI verifier was describing 1,000
-  workflows. Release-soak evidence now measures SDK worker/client behavior
-  instead of the throughput of a shell-based verifier.
+  with bounded describe concurrency.
 - May 7, 2026: isolated the signal/query and query-only integration suites onto
   UUID-suffixed task queues by default. The shared remote Temporal namespace had
   stale `temporal-bun-integration` workflow tasks from previous runs, so workers
@@ -172,12 +149,12 @@ acceptance criteria are satisfied.
   because Temporal queries are not history events. A regression test now covers
   the sequence that failed in CI: query while blocked, then process a signal and
   query the updated state without tripping nondeterminism.
-- May 8, 2026: the publish-mode six-hour soak completed 40 consecutive
-  `1000`-workflow iterations across baseline, worker restart, sticky churn,
-  update rejection/termination, and activity cancellation before the 41st
-  iteration hit the worker-load runner's fixed `105s` completion budget. The
-  gate now scales the default completion budget with workflow count and
-  concurrency, records that derived budget in load reports, and writes partial
-  workflow completion status plus a serialized completion failure before
-  returning nonzero. Default choice remains blocked until the publish-mode soak
-  reruns and publishes `0.10.0`.
+- May 8, 2026: the worker-load gate now scales the default completion budget
+  with workflow count and concurrency, records that derived budget in load
+  reports, and writes partial workflow completion status plus a serialized
+  completion failure before returning nonzero.
+- May 8, 2026: fixed the package-boundary verifier to accept passing
+  release load evidence when the worker-load artifact is default-choice scale.
+  The npm `latest` dist-tag pointed at `0.10.0`, whose published
+  `dist/agent-readiness.json` reported `recommended: true` with no blockers for
+  the scoped Bun-first support model.

package/docs/feature-matrix.md

@@ -1,26 +1,26 @@
 # Temporal Bun SDK Feature Matrix
 
-_Last updated: May 6, 2026_
+_Last updated: May 14, 2026_
 
-| Feature                            | Status                                             | Evidence                                                                                                                                                               |
-| ---------------------------------- | -------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Pure Bun worker runtime            | Supported                                          | `src/worker/runtime.ts`, `verify:production`, package-boundary tests.                                                                                                  |
-| Workflow command context           | Supported                                          | `src/workflow/context.ts`, `tests/workflow/*.test.ts`, protocol golden tests.                                                                                          |
-| Deterministic time/random wrappers | Supported                                          | `src/workflow/guards.ts`, runtime guard tests, query guard matrix.                                                                                                     |
-| Workflow queries                   | Supported with strict read-only guards             | `tests/integration/query-only.integration.test.ts`, `tests/workflow/query-guard-matrix.test.ts`.                                                                       |
-| Workflow signals                   | Supported                                          | `tests/integration/signal-query.integration.test.ts`, `tests/workflow/signals-queries.test.ts`.                                                                        |
-| Workflow updates                   | Supported                                          | `tests/integration/workflow-updates.test.ts`, `tests/worker.update-protocol.test.ts`.                                                                                  |
-| Activities                         | Supported                                          | `tests/integration/activity-lifecycle.integration.test.ts`, `tests/activities/lifecycle.test.ts`.                                                                      |
-| Heartbeats and cancellation        | Supported                                          | Activity lifecycle integration tests.                                                                                                                                  |
-| Sticky queues/cache                | Supported                                          | `src/worker/sticky-cache.ts`, worker runtime integration tests, load report.                                                                                           |
-| Replay ingestion                   | Supported                                          | `src/workflow/replay.ts`, replay fixtures, replay corpus verifier.                                                                                                     |
-| Payload codecs                     | Supported                                          | JSON tunnel, gzip, AES-GCM tests and payload codec integration.                                                                                                        |
-| TLS/mTLS                           | Supported                                          | TLS config tests and docs.                                                                                                                                             |
-| Temporal Cloud Ops                 | Supported when endpoint credentials are configured | Cloud Ops integration is optional without credentials.                                                                                                                 |
-| Worker build IDs/versioning        | Supported with strict pinned policy in production  | Worker runtime configuration and build-id registration tests.                                                                                                          |
-| Nexus operation commands           | Experimental                                       | Unit coverage exists; replay corpus and integration coverage must expand before default-choice recommendation.                                                         |
-| Release soak proof                 | Supported with release smoke                       | `scripts/run-worker-soak.ts`; CI uploads `worker-soak/report.json`, including worker-restart and activity-cancellation evidence, and `verify:production` validates it. |
-| Extended soak proof                | Operational hardening gate                         | Run longer soak windows for unusually high-throughput or new platform/runtime combinations.                                                                            |
+| Feature                            | Status                                             | Evidence                                                                                                           |
+| ---------------------------------- | -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------ |
+| Pure Bun worker runtime            | Supported                                          | `src/worker/runtime.ts`, `verify:production`, package-boundary tests.                                              |
+| Workflow command context           | Supported                                          | `src/workflow/context.ts`, `tests/workflow/*.test.ts`, protocol golden tests.                                      |
+| Deterministic time/random wrappers | Supported                                          | `src/workflow/guards.ts`, runtime guard tests, query guard matrix.                                                 |
+| Workflow queries                   | Supported with strict read-only guards             | `tests/integration/query-only.integration.test.ts`, `tests/workflow/query-guard-matrix.test.ts`.                   |
+| Workflow signals                   | Supported                                          | `tests/integration/signal-query.integration.test.ts`, `tests/workflow/signals-queries.test.ts`.                    |
+| Workflow updates                   | Supported                                          | `tests/integration/workflow-updates.test.ts`, `tests/worker.update-protocol.test.ts`.                              |
+| Activities                         | Supported                                          | `tests/integration/activity-lifecycle.integration.test.ts`, `tests/activities/lifecycle.test.ts`.                  |
+| Heartbeats and cancellation        | Supported                                          | Activity lifecycle integration tests.                                                                              |
+| Sticky queues/cache                | Supported                                          | `src/worker/sticky-cache.ts`, worker runtime integration tests, load report.                                       |
+| Replay ingestion                   | Supported                                          | `src/workflow/replay.ts`, replay fixtures, replay corpus verifier.                                                 |
+| Payload codecs                     | Supported                                          | JSON tunnel, gzip, AES-GCM tests and payload codec integration.                                                    |
+| TLS/mTLS                           | Supported                                          | TLS config tests and docs.                                                                                         |
+| Temporal Cloud Ops                 | Supported when endpoint credentials are configured | Cloud Ops integration is optional without credentials.                                                             |
+| Worker build IDs/versioning        | Supported with strict pinned policy in production  | Worker runtime configuration and build-id registration tests.                                                      |
+| Nexus operation commands           | Experimental                                       | Unit coverage exists; replay corpus and integration coverage must expand before default-choice recommendation.     |
+| Release load proof                 | Supported with CI release load evidence            | `scripts/run-worker-load.ts`; CI uploads `worker-load/report.json`, and `verify:production` validates it.          |
+| Extended environment proof         | Operational hardening gate                         | Run target-environment replay and load windows for unusually high-throughput or new platform/runtime combinations. |
 
 Status language:
 

package/docs/production-design.md

@@ -40,7 +40,7 @@ Bun worker/client path in the deployed control-plane worker.
 > "Bun cannot load the official Node worker stack." This SDK does not depend on
 > `@temporalio/worker`, Node-API native modules, `process.dlopen()`, or
 > `worker_threads` for worker execution. The real external concern is trust:
-> third-party support status, public proof of deterministic replay and soak/load
+> third-party support status, public proof of deterministic replay and load
 > behaviour, and clear operational docs for teams choosing a non-official SDK.
 > `bun run verify:production` is the mechanical package-boundary gate: it fails
 > if native bridge artifacts, official Node worker dependencies, or stale native
@@ -251,7 +251,7 @@ can contribute independently without re-planning.
   - CPU-heavy + I/O-heavy workflows live under `tests/integration/load/**` alongside the JSONL metrics aggregator. The harness starts the Temporal CLI dev server, creates `.artifacts/worker-load` per run, and collects sticky cache, poll latency, and throughput metrics via the worker runtime's file exporter.
   - Local runs: `cd packages/temporal-bun-sdk && TEMPORAL_INTEGRATION_TESTS=1 bun test tests/integration/worker-load.test.ts` (Bun test runner) or `cd packages/temporal-bun-sdk && bun run test:load` (Bun CLI script).
   - CI: `.github/workflows/temporal-bun-sdk.yml` now executes `cd packages/temporal-bun-sdk && bun run test:load` after the main suite and uploads the `.artifacts/worker-load/{metrics.jsonl,report.json,temporal-cli.log}` bundle for reviewers.
-  - Default knobs submit 64 workflows with a 100s completion budget and workflow/activity concurrency of 10/14; completion evidence is verified through the SDK's own `DescribeWorkflowExecution` RPC path with bounded `TEMPORAL_LOAD_TEST_DESCRIBE_CONCURRENCY` instead of shelling out to `temporal workflow describe` for every workflow. This keeps the release soak focused on worker/runtime behavior instead of CLI polling overhead.
+  - Default knobs submit 64 workflows with a 100s completion budget and workflow/activity concurrency of 10/14; completion evidence is verified through the SDK's own `DescribeWorkflowExecution` RPC path with bounded `TEMPORAL_LOAD_TEST_DESCRIBE_CONCURRENCY` instead of shelling out to `temporal workflow describe` for every workflow. This keeps release load evidence focused on worker/runtime behavior instead of CLI polling overhead.
 
 ### TBS-004 – Observability (Complete)
 
@@ -506,7 +506,7 @@ can contribute independently without re-planning.
 3. **Replay regression harness**
    - Capture real histories, replay offline, ensure deterministic snapshots survive
      worker restarts.
-4. **Performance & soak testing**
+4. **Performance and load testing**
    - Stress test worker concurrency scaling, measure poll latency under load.
 5. **CI pipeline**
    - Bun tests, lint (Oxlint), formatting (`bunx oxfmt --check`), type-check (`bunx tsc --noEmit`), Temporal dev-server

package/docs/production-readiness-implementation-plan.md

@@ -1,6 +1,6 @@
 # Temporal Bun SDK Production Readiness Implementation Plan
 
-_Last updated: May 5, 2026_
+_Last updated: May 14, 2026_
 
 ## Goal
 
@@ -44,15 +44,15 @@ work is to convert private confidence into public, machine-checkable evidence.
 | Surface              | Current implementation                                                                                                                                                                                                                                                                                                                                       | Production gap to close                                                                                                                                                                                                    |
 | -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | Package boundary     | `packages/temporal-bun-sdk/package.json` ships `dist`, `docs`, `skills`, and `README.md`; runtime dependencies are `@bufbuild/protobuf`, Connect, Effect, and TypeScript. `verify:production` runs `tests/packaging/manifest-packaging.test.ts`.                                                                                                             | Keep this as a release gate and publish the result in a release manifest so agents can prove the package is not a Node/native wrapper.                                                                                     |
-| Worker runtime       | `src/worker/runtime.ts` owns config load, WorkflowService transport, workflow/activity pollers, sticky queues, deployment/build IDs, scheduler, metrics, plugins, graceful shutdown, determinism marker emission, and activity task lifecycle.                                                                                                               | Add restart/chaos/soak scenarios for poll cancellation, sticky cache drift, task-not-found, heartbeat failure, tuner changes, and shutdown during active workflow/activity tasks.                                          |
+| Worker runtime       | `src/worker/runtime.ts` owns config load, WorkflowService transport, workflow/activity pollers, sticky queues, deployment/build IDs, scheduler, metrics, plugins, graceful shutdown, determinism marker emission, and activity task lifecycle.                                                                                                               | Keep restart, cancellation, sticky cache, and shutdown behavior covered by focused integration and load evidence.                                                                                                          |
 | Workflow execution   | `src/workflow/executor.ts` runs registered workflows through Effect, creates `WorkflowCommandContext`, evaluates queries, processes updates, and materializes success/failure commands.                                                                                                                                                                      | Add protocol golden tests that compare emitted commands and update protocol messages against captured histories and expected server-visible events.                                                                        |
 | Determinism guard    | `src/workflow/determinism.ts` records command, random, time, signal, query, and update streams and throws `WorkflowNondeterminismError` on replay mismatch.                                                                                                                                                                                                  | Add async interleaving fuzz tests and query-mode negative tests. Query handlers must never read live time/randomness as a hidden side channel.                                                                             |
 | Runtime guards       | `src/workflow/guards.ts` patches `Date`, `Date.now`, `Math.random`, `crypto.randomUUID`, `crypto.getRandomValues`, `fetch`, timers, `performance.now`, `WebSocket`, `process.env`, `Bun.env`, `Bun.spawn`, `Bun.nanoseconds`, `Bun.sleep`, `Bun.file`, `Bun.write`, `Bun.connect`, and `Bun.serve`; `WorkflowExecutor` requires strict guards in production. | Release gate includes runtime guard tests, query guard matrix, workflow lint tests, async fuzz artifacts, and semantic-readiness evidence for Bun async/runtime behavior.                                                  |
 | Static workflow lint | `src/bin/lint-workflows-command.ts` walks workflow import graphs and denies unsafe imports/globals/member expressions. Tests cover `fetch`, `process.env`, `Bun.env`, Bun timer/file/socket APIs, captured `Date.now`, and importing client APIs from workflows.                                                                                             | Add rules for timers captured through aliases and keep expanding adversarial workflow-isolation cases as Bun exposes new runtime APIs. Make release CI fail if configured workflow entries are missing.                    |
 | Replay               | `src/workflow/replay.ts` ingests real histories, applies full/delta determinism markers, reconstructs command history, tracks updates, and diffs mismatch metadata. Stored fixtures now cover the required replay feature tags, including signal/query/update, cancellation, search attributes, side effects, versioning, and workflow-task failure.         | Scale from the current gate-passing replay corpus to a larger versioned corpus that covers every supported command/event pair, sticky replay variants, old SDK versions, and additional Temporal Server/Bun/platform rows. |
 | Integration          | `tests/integration/**` covers history replay, activity lifecycle, query-only workflows, signal/query, workflow updates, payload codecs, client resilience, worker ops, schedules, and worker runtime behavior behind `TEMPORAL_INTEGRATION_TESTS=1`.                                                                                                         | Split optional service-unavailable skips from release-blocking skips. In release CI, a missing dev server or unimplemented critical endpoint must fail instead of silently reducing coverage.                              |
-| Load/soak            | `tests/integration/load/**` submits CPU, activity, and update workflows, checks throughput, sticky hit ratio, and poll p95 latency, and writes JSONL/report artifacts. `scripts/run-worker-soak.ts` wraps load iterations and now records baseline, worker-restart, sticky-cache-churn, update rejection/termination, and activity-cancellation smoke modes. | Add Temporal endpoint interruption, heartbeat RPC failure injection, and completed nightly/release soak evidence.                                                                                                          |
-| CI                   | `.github/workflows/temporal-bun-sdk.yml` builds, lints, tests, runs replay-corpus, async-fuzz, load, soak smoke, semantic production verification, and uploads release artifacts.                                                                                                                                                                            | Add longer restart/chaos soak lanes before broadening support to new platforms, Temporal Server minors, or higher-throughput profiles.                                                                                     |
+| Load                 | `tests/integration/load/**` submits CPU, activity, and update workflows, checks throughput, sticky hit ratio, and poll p95 latency, and writes JSONL/report artifacts.                                                                                                                                                                                       | Keep release blocking on the CI load report and add targeted failure-injection tests instead of long release validation.                                                                                                   |
+| CI                   | `.github/workflows/temporal-bun-sdk.yml` builds, lints, tests, runs replay-corpus, async-fuzz, load, semantic production verification, and uploads release artifacts.                                                                                                                                                                                        | Keep the publish path short enough to release directly.                                                                                                                                                                    |
 
 ## Production Bar
 
@@ -65,8 +65,8 @@ single production-readiness artifact containing:
   matrix, and mismatch diagnostics samples.
 - Protocol proof: command/update/query/signal/activity golden tests by Temporal
   Server version and SDK version.
-- Operations proof: load and soak reports with throughput, latency, sticky cache
-  ratio, heartbeat retries/failures, worker failures, memory slope, and restart
+- Operations proof: load reports with throughput, latency, sticky cache ratio,
+  heartbeat retries/failures, worker failures, memory slope, and restart
   outcomes.
 - Compatibility proof: supported Bun, Temporal Server, Temporal Cloud, TLS/mTLS,
   payload codec, and deployment/versioning matrix.
@@ -179,10 +179,11 @@ Coverage targets:
 Acceptance:
 
 - PR gate: at least 25 high-signal corpus fixtures.
-- Release gate: at least 75 fixtures covering every GA-critical command/event
-  family.
-- Default-choice gate: at least 150 fixtures across at least two Temporal Server
-  minor versions and two SDK minor versions.
+- Release/default-choice gate: at least 25 fixtures with the required
+  feature-tag coverage and no replay failures.
+- Broad-matrix hardening target: expand toward 75+ fixtures covering every
+  GA-critical command/event family before broadening the supported Temporal
+  Server, SDK, Bun, or platform matrix.
 
 ### P3 - Protocol Golden And Compatibility Tests
 
@@ -214,7 +215,7 @@ Acceptance:
   fixture or an explicit unsupported-status entry.
 - Protocol golden tests fail on accidental protobuf field drift.
 
-### P4 - Worker Lifecycle, Chaos, And Soak
+### P4 - Worker Lifecycle And Failure Injection
 
 Purpose: prove the runtime holds under real operating conditions.
 
@@ -235,44 +236,32 @@ Implementation:
   - force sticky cache eviction and drift rebuilds;
   - track task-not-found, nondeterminism, heartbeat retry/failure, activity
     failure, workflow failure, and sticky heal metrics.
-- Harden `scripts/run-worker-soak.ts`.
-  - Duration-mode wrapper around the load runner with stricter artifact
-    validation.
-  - Current smoke mode records per-iteration load summaries, `memory.jsonl`,
-    RSS/heap slope summaries, and coverage for baseline, worker-restart,
-    sticky-cache-churn, update rejection/termination, and activity
-    cancellation.
+- Harden load evidence instead of keeping a long release gate.
+  - The release path uses the worker-load runner as the blocking operational
+    artifact.
+  - Restart, sticky-cache, update termination, and activity-cancellation
+    behavior should be covered by focused tests or load scenarios, not a
+    separate long publish prerequisite.
   - `tests/worker.task-queue-kind.test.ts` now directly holds normal workflow,
     sticky workflow, and activity long-poll RPCs open and verifies worker
     shutdown aborts every poll, flushes metrics, and reports a drained shutdown.
   - `worker-restart` now shuts down the active worker runtime after workflow
     submission, waits briefly, starts a replacement runtime on the same queue,
-    and records restart events in the load and soak reports.
+    and records restart events in the load report.
   - `activity-cancellation` cancels activity-heavy workflows while heartbeat
     activities are running and records cancellation attempts, successful
     cancellation calls, and terminal `CANCELED` workflow outcomes in the load
-    and soak reports.
-  - Remaining work is endpoint disconnect injection, heartbeat RPC failure
-    injection, and completing the long-running release lanes with passing
-    six-hour evidence.
-- `.github/workflows/temporal-bun-sdk-nightly.yml` now provides the long-soak
-  lane.
-  - Runs 2-hour soak nightly.
-  - Runs 6-hour soak in manual release mode.
-  - Uploads long-soak and readiness artifacts.
-  - Allows longer manual soak before broadening platform or throughput support.
+    report.
+  - Further hardening work is endpoint disconnect injection and heartbeat RPC
+    failure injection before broadening the support matrix beyond the release
+    evidence.
 
 Acceptance:
 
 - PR load smoke: current short load test remains under 10 minutes.
-- Nightly soak: 2 hours, zero stuck workflows, no unhandled runtime rejection,
-  memory slope below threshold, sticky heal rate below threshold, and all
-  metrics artifacts uploaded.
-- Release soak: 6 hours against pinned Temporal Server with restart mode
-  enabled.
-- Default-choice release smoke: CI soak artifact present and validated by
-  `verify:production`; extended soak is required for unusual workload or
-  platform risk.
+- Default-choice release gate: replay, async fuzz, worker load, provenance, and
+  semantic evidence validated by `verify:production` and
+  `verify:default-choice`.
 
 ### P5 - CI Skip Policy And Release Blocking Rules
 
@@ -291,7 +280,6 @@ Implementation:
   - `test:integration:critical`;
   - `test:integration:optional`;
   - `test:load`;
-  - `test:soak`.
 - Publish `.artifacts/temporal-bun-sdk/test-summary.json`.
 
 Acceptance:
@@ -337,20 +325,19 @@ Acceptance:
 
 ## Gate Matrix
 
-| Gate                 | Command                                                           | PR                        | Release           | Default-choice                |
-| -------------------- | ----------------------------------------------------------------- | ------------------------- | ----------------- | ----------------------------- |
-| Package boundary     | `bun run --filter @proompteng/temporal-bun-sdk verify:production` | required                  | required          | required                      |
-| Build                | `bun run --filter @proompteng/temporal-bun-sdk build`             | required                  | required          | required                      |
-| Unit/runtime guards  | `bun test tests/workflow/runtime-guards.test.ts`                  | required                  | required          | required                      |
-| Query guard matrix   | `bun test tests/workflow/query-guard-matrix.test.ts`              | required                  | required          | required                      |
-| Async fuzz           | `bun test tests/workflow/async-determinism-fuzz.test.ts`          | 1k seeds                  | 10k seeds         | 10k+ seeds, last 7 days green |
-| Replay corpus        | `bun scripts/replay/verify-corpus.ts`                             | 25 fixtures               | 75 fixtures       | 150 fixtures                  |
-| Protocol golden      | `bun test tests/protocol/*.test.ts`                               | required                  | required          | required                      |
-| Critical integration | `TEMPORAL_INTEGRATION_TESTS=1 bun test tests/integration`         | required                  | no critical skips | no critical skips             |
-| Load smoke           | `bun run --filter @proompteng/temporal-bun-sdk test:load`         | required                  | required          | required                      |
-| Soak                 | `bun scripts/run-worker-soak.ts`                                  | optional                  | 6h                | 24h                           |
-| Docs                 | `bun run --filter docs build`                                     | required when docs change | required          | required                      |
-| Pack                 | `npm pack --dry-run --json`                                       | optional                  | required          | required                      |
+| Gate                 | Command                                                           | PR                        | Release             | Default-choice                                  |
+| -------------------- | ----------------------------------------------------------------- | ------------------------- | ------------------- | ----------------------------------------------- |
+| Package boundary     | `bun run --filter @proompteng/temporal-bun-sdk verify:production` | required                  | required            | required                                        |
+| Build                | `bun run --filter @proompteng/temporal-bun-sdk build`             | required                  | required            | required                                        |
+| Unit/runtime guards  | `bun test tests/workflow/runtime-guards.test.ts`                  | required                  | required            | required                                        |
+| Query guard matrix   | `bun test tests/workflow/query-guard-matrix.test.ts`              | required                  | required            | required                                        |
+| Async fuzz           | `bun test tests/workflow/async-determinism-fuzz.test.ts`          | 1k seeds                  | 10k seeds           | 10k seeds, 64 operations per seed               |
+| Replay corpus        | `bun scripts/verify-replay-corpus.ts`                             | required feature tags     | 25+ fixtures        | 25+ fixtures with required feature-tag coverage |
+| Protocol golden      | `bun test tests/protocol/*.test.ts`                               | required                  | required            | required                                        |
+| Critical integration | `TEMPORAL_TEST_SERVER=1 bun test tests/integration`               | required                  | no critical skips   | no critical skips                               |
+| Load                 | `bun run --filter @proompteng/temporal-bun-sdk test:load`         | smoke profile             | required            | 64 workflows, peak concurrency 10               |
+| Docs                 | `bun run --filter docs build`                                     | required when docs change | required            | required                                        |
+| Pack                 | `npm pack --dry-run --json`                                       | optional                  | required/provenance | required/provenance                             |
 
 ## First Implementation Order
 
@@ -362,7 +349,7 @@ Acceptance:
    durable proof across real histories.
 4. **P3 protocol golden tests.** This protects the pure-Bun command
    materializer from Temporal protobuf/server drift.
-5. **P4 soak mode.** This moves the load harness from a smoke test to
+5. **P4 load mode.** This moves the load harness from a smoke test to
    operational proof.
 6. **P6 agent metadata.** Only mark the SDK as default when the evidence gates
    are green, not because the docs claim it.
@@ -378,13 +365,17 @@ Acceptance:
 
 ## Definition Of Done
 
-The SDK is production-default for agents when:
+The SDK is production-default for scoped Bun-first agent use when:
 
 - `agent-readiness.json` says `recommended: true`.
 - The latest release manifest proves all default-choice gates are green.
-- The replay corpus covers every GA-critical workflow/event family.
+- The replay corpus covers every GA-critical workflow/event family represented
+  in the supported feature matrix.
 - Async fuzz and query guard tests have no open determinism escapes.
-- Load and soak artifacts are linked from release artifacts and validated by
+- Load artifacts are linked from release artifacts and validated by
   `verify:production`.
 - Docs and comparison pages explain that this is a pure Bun SDK with public
   evidence, not an unofficial wrapper around the Node worker.
+- The recommendation remains scoped to the Bun, Temporal Server, OS/arch, and
+  workload matrix represented by the release artifact; broader environments
+  need their own replay and load evidence.