illyar80 opened a new pull request, #22796: URL: https://github.com/apache/kafka/pull/22796
## Summary Add a paragraph to the **Message Delivery Semantics** section of the design documentation (`docs/design/design.md`) describing the formally verified temporal collision window in the offset-commit protocol. The existing documentation (line 200) correctly describes at-least-once semantics for the crash-after-process-before-commit scenario. This PR adds: 1. A reference to the formal (TLA+) verification of this temporal window 2. Confirmation that the identical scenario has been reproduced across RabbitMQ (rabbitmq-server#16908) and NATS JetStream 3. Recommendation of the idempotent consumer pattern as the reliable mitigation ## Change Only `docs/design/design.md` — 2 lines inserted after the at-least-once bullet point. /cc @apache/kafka-committers _Note: JIRA ticket pending (ASF JIRA account requested). Will update PR title to KAFKA-xxxx when assigned._ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
