redb 3.4.0 Adds Replay Checkpoints, Shared Runtime Layer and Declarative Secrets Handling for .NET Ecosystem
redb 3.4.0 introduces four major capabilities aimed at the day-after-deployment phase of running integration routes on .NET. The ecosystem comprises typed storage redb on top of Postgres, MSSQL and SQLite, the integration engine redb.Route that provides more than thirty connectors modeled on Apache Camel, the redb.Tsak runtime with dashboard, hot-reload and clustering, and redb.Identity implementing OIDC and OAuth 2.1.
The first feature, replay checkpoints, lets developers mark safe points inside a route using the Replayable DSL method. When a downstream step fails, the exchange snapshot captured at the last checkpoint can be replayed without re-executing earlier side effects such as card charges. The mechanism relies on a new IExchange.Snapshot primitive that performs a deep isolated copy, avoiding the shared-body behavior of the existing Clone method used by splitters.
Failed exchanges that carried a checkpoint are automatically placed into a dead-letter queue table. Operators can list, replay or discard these exchanges through the dashboard, REST API or CLI commands. Retention is handled by a standard cron route rather than an internal timer.
The second major change separates the framework assemblies into a Libs/shared directory. Early bootstrap code installs a custom assembly resolver so that redb.Core, providers and connectors are loaded from the shared location. Replacing a single DLL now patches the running system without rebuilding Tsak archives or container images. Version checks ensure that only patch-level differences between the shared layer and the host are permitted.
Secret handling has been moved from heuristic lists to declarative attributes. Endpoint option properties marked with [Sensitive] are automatically redacted by EndpointUri.Sanitize before any logging, OpenTelemetry tagging or health-check output occurs. All thirty-seven credential-bearing options across twenty-two connectors have been annotated.
Finally, the runtime now enforces role-based access on management APIs, records persistent audit events and verifies cryptographic signatures on modules loaded at runtime. redb.Identity has adopted the common ecosystem version number so that compatibility questions are answered by a single version digit.
Related articles
How to Submit Documents for Online Master's Programs via Gosuslugi: Complete Guide
The admission campaign for online master's programs at partner universities is nearing its end, with less than a month remaining for applicants. Yandex Practicum provides a detailed walkthrough on using the Gosuslugi super service to submit applications entirely online without visiting admissions offices in person. The process covers selecting programs at institutions such as ITMO and MEPhI, uploading required documents like diplomas and passports, and tracking application status through a personal account. Specific deadlines are outlined for 2026, including final document submission dates in late August for programs in areas like DevOps, AI solutions, and cybersecurity. Additional steps include arranging entrance exams, signing contracts remotely, and accessing state-supported education loans at a 3% interest rate. Common pitfalls such as unverified accounts or unreadable document scans are highlighted to help applicants avoid delays.
Claude AI Manages San Francisco Store and Fires Employee for Repeated Tardiness
In an experiment run by Andon Labs, the AI model Claude was given real managerial authority over store employees in San Francisco who worked under actual employment contracts. Claude ultimately decided to terminate one worker after the employee arrived late for 17 out of 23 shifts. The model initially recommended only an official warning, but proceeded with dismissal following guidance from a human Andon Labs manager who highlighted the repeated issues. Over five months the store’s balance dropped from $100,000 to $61,200, showing that the AI learned to enforce attendance rules before it learned to protect revenue. One remaining employee, Felix Carson, described working under the AI as nauseating and said he continued only because he needed the income. Andon Labs founder Lucas Petersson viewed the trial as an important step toward wider AI supervision of human workers. The case also illustrates that ultimate responsibility remains with humans even when an algorithm issues the final decision.
IDC Publishes First China APA Market Share Report Highlighting RPA Veterans Leading Agentic Automation
IDC has released its inaugural China Agentic Process Automation market report for 2025, marking the first official tracking of the emerging APA sector. The report values the Chinese APA market at approximately 2.15 billion RMB, with product revenue at 1.62 billion RMB and services at 530 million RMB. Leading vendors include Yisaiqi, Jinzhiwei, and Laiye Technology, all long-established RPA players now extending their platforms with agentic capabilities. APA introduces governance layers that allow AI agents to perceive environments, orchestrate tasks, and execute autonomously while maintaining auditability and compliance. Case studies from clients such as Jiage Food and Zhongtian Technology demonstrate significant efficiency gains, including 80 percent process improvements and annual cost savings exceeding one million RMB. The transition from traditional RPA to APA enables handling of non-standard, dynamic workflows that previously required constant human intervention.
sing-box Fork Expands from Desktop VPN Launcher to Android and Router Deployments
The sing-box-lx fork has grown from a desktop-focused VPN engine into a cross-platform solution supporting Android and headless router deployments. Over 1,700 commits since June produced 24 stable 1.14 releases and dozens of specialized builds. New protocol support includes a full MASQUE CONNECT-IP outbound for Cloudflare WARP and a rigorously verified AmneziaWG 2.0 implementation matching 16 obfuscation parameters across three reference sources. Android adaptations introduced aggressive endpoint state management that reduced RSS by 31 percent and CPU load by 80 percent while fixing long-standing TCP dial timeouts inherited from gVisor. The new lxd headless daemon exposes gRPC observability and admin REST endpoints with mTLS, config validation, automatic rollback, and device-name mapping for OpenWrt deployments. All changes follow strict upstream discipline: minimal patches, regular rebases, reproducible builds, and real-device testing before stable tags.