Workflow 2.14.0 makes workflow service-operation admission and execution predictable under concurrency and crash recovery. Trusted host authorizers now own principal and namespace authority; replay and keyed creation are reauthorized against locked canonical state. Service effects dispatch outside completion locks, cap synchronous waits at 60 seconds, and preserve one opaque effect identity through recovery.
Workflow task completions now enforce hard structural limits for history events, history bytes, metered rows and external payload bytes. Lifecycle events dispatch only after commit, predictable external payloads are staged only after admission, and local-activity timing values are bounded to storable ranges.
Changes: #934 and #937. The exact release source is b814c6c485b1c072f4092d3f478c7deba9c8c241, qualified by the full main build, including all database shards, coverage, Laravel upgrades and Sonar.
The normal published-package verification runs for this tag. PHP Server images and pinned applications require their own adoption and installed acceptance.