port(go): async Windows ACL harden for response-state (#645)

[Wibias]

Source

• dev merge: fix(windows): async ACL harden for response-state writes (#612) #645 (341d4863, closes [Bug]: synchronous Windows ACL hardening stalls the proxy on response-state writes #612)
• dev2-go carry: fix(windows): carry async ACL harden onto dig2-go (#645) #686

Gap

TS replaces sync icacls waits on the response-state write path with async ACL hardening (hardenSecretPathAsync / atomicWriteFileAsync), destination-path timeout memo, single-flight persistence, and awaited flush on shutdown (owner-first grant preserved).

Go has go/internal/platform/winacl_common.go and go/internal/server/responses_state*.go — needs parity for async ACL / write-path behavior.

Done when

Go response-state persistence matches the TS oracle with tests green on dev2-go.

[github-actions]

_{Automated translation bookkeeping — detected language: unknown.}

[lidge-jun]

Closing: the dev2-go Go native-port line is retired, so this port obligation no longer exists.

The dual-track policy required every merge into dev to be rebased onto dev2-go and ported under go/. That cost outran its return — the carry backlog never cleared and dogfooding the Go runtime kept producing new defects. Bun-native TypeScript on dev is the single runtime line again.

The branch history is preserved read-only at https://github.com/lidge-jun/opencodex-go-archive, and its final tip stays reachable in this repository as the archive/dev2-go tag. The needs-go-port label is retired.

The TypeScript change this issue tracked is already on dev; only the Go counterpart is dropped. Future native work is expected to be an incremental module on dev (Rust via N-API is the current candidate) rather than a second integration branch. See MAINTAINERS.md for the decision record.

[lidge-jun]

Closing this as not planned: the Go native-port line it belonged to has been retired.

What changed. We ran dev (Bun-native TypeScript) and dev2-go (Go native port) as two integration lines, and every merge into dev carried an obligation to port the same change onto dev2-go. In practice that dual track cost more than the port returned — dogfooding the Go runtime kept surfacing new defects faster than we closed them, and the carry queue never emptied. So dev is once again the single integration line, and there is no port obligation attached to a dev merge any more.

Nothing is lost. The full dev2-go history is archived at lidge-jun/opencodex-go-archive, and the final tip is tagged archive/dev2-go in this repository. If native code returns, the plan is an incremental module (for example Rust via N-API) landing on dev, not a second full-runtime branch.

The underlying fix is already on dev — this issue only tracked the missing Go counterpart, so there is no behavior regression from closing it. The needs-go-port label is retired as well.

Sorry for the churn, and thank you for the carry and port work you put into this line. It was genuinely useful for learning where the runtime boundaries are; the direction change is on me, not on the work.

[Wibias]

[shipping-github] Research review

Claim: Port the TS async Windows ACL harden for response-state onto the Go runtime (dev2-go).
Checked against: dev@be177ea5 (release/default: main)

Field	Finding
Still an issue on latest development?	no
Exact issue	Go-port carry of #645 async ACL harden
Fixed on development?	yes for TS — #645 / related Windows ACL work; Go port retired
Open PR covering this?	none (historical #686 merged into retired Go line)
Duplicate of?	none
Security relevance	possible — ACL hardening for secret/response-state paths; n/a for remaining work
Priority	low — closed as not planned; no remaining runtime obligation
Verdict	Already fixed / shipped (TS on dev); Go counterpart Not actionable after dev2-go retirement

Evidence: Issue closed by owner as NOT_PLANNED; Go line archived. AGENTS.md / MAINTAINERS.md: Bun-native TS on dev is the single runtime line.
Gaps: None for this tracker item.

[Wibias]

[shipping-github] Full review

No open PR for this issue. Closed as NOT_PLANNED (Go port retired; TypeScript path already on dev). Verdict: not-useful for a new PR.