[FEATURE] Feature · Go Runtime Adapter (P3)

[contexa73]

Feature · Go Runtime Adapter (P3)

Labels: enhancement, help-wanted
Assignee: @contexa73
Type: Feature
Parent: #1 (Roadmap 2027) · Phase 3 — 2028 H2 baseline

Position in the roadmap

Go is the third runtime expansion. The roadmap order reflects deployment volume in the targets we hear most often:

2027   → Node.js (P1, current focus)
2028 H1 → Python SDK (#03)
2028 H2 → Go Runtime Adapter (this issue)

The gRPC interceptor work materially raises Go's complexity compared to the other two adapters, which is a second reason it sits last in the sequence — not a statement on Go's importance.

Goal

Bring the Post-Authentication Runtime Control Plane to the Go ecosystem (~8 M developers, dominant in cloud-native / Kubernetes / service mesh).

Scope

Surface	Status	Notes
net/http middleware	TODO	Standard library baseline
gin middleware	TODO	Most popular Go web framework
echo middleware	TODO	Second most popular
chi middleware	TODO	Composable routing
gRPC unary interceptor	TODO	Server-side decision evaluation
gRPC streaming interceptor	TODO	Long-running stream protection
OAuth2 / JWT bridge	TODO	Compatible with mcp-auth-server
Evidence sealing	TODO	SHA-256 8-section package

Why Go matters for Contexa

• Cloud-native default for sidecars, service meshes, API gateways
• Strong stdlib net/http makes adapter authoring straightforward
• Goroutine model fits well with the asynchronous evidence forwarding

Acceptance criteria

• All 5 actions integrate with HTTP and gRPC paths
• HTTP status code parity (200 / 401 / 403 / 423 / 503)
• gRPC status code mapping documented (UNAUTHENTICATED · PERMISSION_DENIED · ABORTED · UNAVAILABLE)
• Module path github.com/contexa-security/contexa-go (TBD)
• Go 1.22+ supported
• Race detector clean (go test -race)

How to contribute

Reply with your Go stack (gin / echo / chi / fiber / standard library) and whether you want to take on the gRPC interceptor work — that is the surface where we most need experienced Go contributors. Early Go prototyping is welcome even before Phase 3 starts.

Reference

• Java reference: spring-boot-starter-contexa
• Decision contract: 5 actions defined in ZeroTrustAction enum
• Architecture: https://docs.ctxa.ai/docs/reference/architecture/overview.html