Use released Flow for graph execution and the released nested flow/store module as the checkpoint adapter. A Flow graph describes the allowed transitions; a Runner owns one execution; a checkpoint store owns the durable state that makes interruption and resume possible.

Graph boundary

flow.Graph accepts vertices, edges, conditional edges, and task definitions before Compile validates the graph. Compilation is the point at which missing vertices, invalid transitions, and graph shape errors should surface. Keep policy decisions in task functions or explicit guards, not in an implicit edge that is difficult to inspect.

Runner lifecycle

Create a Runner from a compiled graph and run one execution with its input and context. The Runner reports status and history and supports interruption, cancellation, retry, and resume according to the task and run state. An interrupt is a durable state transition only when the configured checkpoint path successfully records it; a process exit without a checkpoint is not a resumable run.

Checkpoint storage

The nested flow/store module provides store.New(ledger storage.Ledger), which adapts a Storage ledger to the Flow checkpoint contract. It is a nested Go module under flow/store with its own module file, published from the Flow repository at its own store/v0.1.0 tag and on its own cadence, so its version is independent of the parent Flow version. Pin that tag rather than leaving a local filesystem replace in a published module.

Control plane and ingress

The control-plane package provides an in-memory implementation for tests and small processes. The registry uses exact name matching, and ingress can require authentication. These are composition boundaries, not tenancy or authorization systems: the application must supply its own tenant isolation, authorization policy, and durable control-plane implementation where those properties matter.

Errors and limits

Handle compile errors before starting a run. During execution, distinguish task failure, cancellation, interruption, retry exhaustion, and checkpoint failure. A resumed run depends on the checkpoint schema and the task’s ability to continue from its recorded state; arbitrary side effects outside the checkpoint remain the caller’s responsibility.

Runnable proof

stage-17-flow runs the released Flow graph, pauses at an interrupt, and resumes with the recorded approval state. Run it with node scripts/docs/run-examples.mjs. The Flow implementation is pinned in the Flow release tree that this stage records; the checkpoint adapter is the nested flow/store module, which the Flow repository now publishes at store/v0.1.0, and this stage is re-pinned when its example manifest is refreshed. The referenced package pages list the pinned source files and adjacent tests used for this boundary.