Documentation / Advanced

Advanced features

Find the feature, its example and the boundary that matters. Every entry links to pinned source code or an explicitly unmerged proposal.

Local examples, contract checks and installation recipes are different evidence. Main code is not a customer deployment certification.

Download the feature audit ↗ · Known gaps

121 audited capabilities

Execution 13

DAG dependenciesLocal example
Example →Source ↗
Root, shard and fan-in scopesLocal example
Example →Source ↗
Named outcomes and branchingLocal example
Example →Source ↗
Bounded rework and input overridesLocal example
Example →Source ↗
JSON and YAML definitionsLocal example
Example →Source ↗
Synchronous Lambda phasesLocal example
Example →Source ↗
Asynchronous queue phasesLocal example
Example →Source ↗
Named lanes and FIFO groupingLocal example
Example →Source ↗
Phase timeout precedenceInstallation required
Example →Source ↗
Bounded worker attemptsInstallation required
Example →Source ↗
Coordination TTL versus timeoutsInstallation required
Example →Source ↗
Watchdog and stalled-work recoveryInstallation required
Example →Source ↗
Exhausted attempts and DLQ handlingInstallation required
Example →Source ↗

Durable work 13

Durable timer waitsInstallation required
Example →Source ↗
External callback waitsInstallation required
Example →Source ↗
Wait expiry and timeout outcomesInstallation required
Example →Source ↗
Early callback bufferingInstallation required
Example →Source ↗
Callback replay and tenant checksInstallation required
Example →Source ↗
Durable async dispatch intentInstallation required
Example →Source ↗
Authenticated generation-bound callbacksInstallation required
Example →Source ↗
Ambiguous dispatch and status lookupInstallation required
Example →Source ↗
Async backoff and retry generationsInstallation required
Example →Source ↗
Cancellation and late callbacksInstallation required
Example →Source ↗
Release worker capacity while waitingInstallation required
Example →Source ↗
Versioned durable agent contextInstallation required
Example →Source ↗
Large-artifact offload and integrityInstallation required
Example →Source ↗

Governance 27

Pre-dispatch budget reservationsInstallation required
Example →Source ↗
Actual usage settlement and refundsInstallation required
Example →Source ↗
Hard versus advisory budgetsInstallation required
Example →Source ↗
Fixed-point currency accountingInstallation required
Example →Source ↗
Token, call and compute metersInstallation required
Example →Source ↗
Hierarchical scope and reset rulesInstallation required
Example →Source ↗
Per-operation exposure ceilingsInstallation required
Example →Source ↗
Iteration and invocation limitsInstallation required
Example →Source ↗
Workflow duration limitsInstallation required
Example →Source ↗
External-operation concurrencyInstallation required
Example →Source ↗
Child-workflow count limitInstallation required
Example →Source ↗
Bounded loops and until predicatesInstallation required
Example →Source ↗
Decision hooks and failure actionsInstallation required
Example →Source ↗
Allow, deny, pause and quarantine decisionsInstallation required
Example →Source ↗
Pinned policy digest and amendmentInstallation required
Example →Source ↗
Human approval gatesInstallation required
Example →Source ↗
Approval rejection and expiryInstallation required
Example →Source ↗
Input/version-bound operation approvalInstallation required
Example →Source ↗
Versioned tool registry and digestInstallation required
Example →Source ↗
Input/output schema checksInstallation required
Example →Source ↗
Tool execution adaptersInstallation required
Example →Source ↗
Operation idempotencyInstallation required
Example →Source ↗
Registered MCP servers and discoveryInstallation required
Example →Source ↗
Progress and bounded resultsInstallation required
Example →Source ↗
Scoped secret references and redactionInstallation required
Example →Source ↗
Outbound targets and SSRF protectionInstallation required
Example →Source ↗
Tool timeout, budget and concurrencyInstallation required
Example →Source ↗

Handlers 12

Rust, Python, Node.js and JavaLocal example
Example →Source ↗
Runtime-family and version pinsLocal example
Example →Source ↗
Handler artifacts and SHA-256 verificationInstallation required
Example →Source ↗
Versioned runtime groupsInstallation required
Example →Source ↗
Worker memory and handler slicesInstallation required
Example →Source ↗
Container admission and concurrencyInstallation required
Example →Source ↗
Group lifecycle and drainingInstallation required
Example →Source ↗
Process-tree memory enforcementInstallation required
Example →Source ↗
Local resource profilingLocal example
Example →Source ↗
Docker development wrapperInstallation required
Example →Source ↗
Managed temporary-workspace APIDocs only — unavailable in pinned main
Example →Source ↗
Handler stdin/stdout and command manifestsLocal example
Example →Source ↗

Security 7

Approved per-phase IAM rolesInstallation required
Example →Source ↗
Execution isolation boundariesInstallation required
Example →Source ↗
Reject payload role overridesInstallation required
Example →Source ↗
JWT identity and tenancyInstallation required
Example →Source ↗
RBAC read/write/admin rolesInstallation required
Example →Source ↗
Enterprise SSO and group bindingsInstallation required
Example →Source ↗
Signed admission and task trustInstallation required
Example →Source ↗

Resilience 10

Cell-aware routing and capacityInstallation required
Example →Source ↗
Multi-region quorum and witnessInstallation required
Example →Source ↗
Execution and authority placementInstallation required
Example →Source ↗
Ownership epochs and stale-worker fencingInstallation required
Example →Source ↗
Checkpoint adoption and reconstructionInstallation required
Example →Source ↗
Regional recovery and ambiguous effectsInstallation required
Example →Source ↗
Scale-up with active workflowsInstallation required
Example →Source ↗
Graceful drain and evacuationInstallation required
Example →Source ↗
Block cell deletion while activeInstallation required
Example →Source ↗
Surgical shard reruns and quotasInstallation required
Example →Source ↗

Operations 17

Execution filters, history and paginationInstallation required
Example →Source ↗
Historical execution restorationInstallation required
Example →Source ↗
Read-only diagnostic replayInstallation required
Example →Source ↗
Event ordering, deduplication and redactionInstallation required
Example →Source ↗
Observed resource health and inventoryInstallation required
Example →Source ↗
Freshness, staleness and missing adaptersInstallation required
Example →Source ↗
Committed-transition capture and CDCInstallation required
Example →Source ↗
Regional Kinesis topologyInstallation required
Example →Source ↗
Provisioned/on-demand stream modelsInstallation required
Example →Source ↗
Verified S3/Parquet archive receiptsInstallation required
Example →Source ↗
Archive compaction and restart recoveryInstallation required
Example →Source ↗
Analytics projections and sparse indexesInstallation required
Example →Source ↗
Rollups and regional watermarksInstallation required
Example →Source ↗
Retention policies and dry-runsInstallation required
Example →Source ↗
Cold-storage and restore boundariesInstallation required
Example →Source ↗
Unique committed-transition accountingInstallation required
Example →Source ↗
Accounting reports and reconciliationInstallation required
Example →Source ↗

Platform 13

Immutable workflow/version registryInstallation required
Example →Source ↗
Reviewed activation and rollbackInstallation required
Example →Source ↗
Team/project attribution and bindingsInstallation required
Example →Source ↗
Application projects and handler manifestsLocal example
Example →Source ↗
Catalog-bound CDK generationLocal example
Example →Source ↗
Signed catalog verification and stagingInstallation required
Example →Source ↗
Installation preflight, updates and rollbackInstallation required
Example →Source ↗
Frozen installation-version contractsContract check
Example →Source ↗
Automatic version discovery and overrideContract check
Example →Source ↗
Actionable unsupported-version errorsContract check
Example →Source ↗
Machine-readable command catalogLocal example
Example →Source ↗
Doctor, validation, dev, reports and TUILocal example
Example →Source ↗
Verified CLI self-updateContract check
Example →Source ↗

Commercial 5

Installation capabilities and Enterprise entitlementsContract check
Example →Source ↗
Versioned commercial agreementsContract check
Example →Source ↗
Cell allowance grants and usage ingestsContract check
Example →Source ↗
Proposed website plans and pricingCommercial preview
Example →Source ↗
Payment/Marketplace integration boundaryCommercial preview
Example →Source ↗

Proposals 3

Ownership rollout migration toolingUnmerged proposal
Example →Source ↗
Distribution closure certificationUnmerged proposal
Example →Source ↗
72-hour endurance and approval-index changesUnmerged proposal
Example →Source ↗

Developer tools 1

Offline documentation retrieval and coding-agent skillLocal example
Example →Source ↗

Audit findings

Managed temporary-workspace API: documented, absent from pinned main. Details →
Customer Controller ingress/owner adapters and commercial runtime/payment integration still need their respective acceptance gates.
Three rollout/distribution/endurance PRs remain proposals; their behavior is not labeled released.
Some unknown phase keys and malformed wait durations pass control validation. Validation boundary →

What the checks establish

Examples use accepted JSON/YAML contracts. Direct model probes exercise timer/callback behavior; the aggregate core report contains 20 derived scenarios, not 20 independent live-cloud tests. Operational reads use mocked loopback transport for syntax checks. Replace CAPITALIZED IDs with your installation values. No live customer install is certified here.

Verified sources

Checked 2026-11-05.

Core public surface 04cb082 · main
Frozen command contracts 7f5ea32 · main
Controller acceptance boundaries f6c7970 · main

Let's talk

Contact Rippflow

Tell us about your workflows, deployment or pricing.

@media(max-width:1023px){.rf-docs-sidebar{display:flex!important;position:static!important;height:auto!important}.rf-docs-sidebar-content{overflow:visible!important}.rf-docs-menu{display:none!important}}