<p><strong>TLDR:</strong> OpenCode signed zero data retention agreements with all AI providers for Go, meaning your code stays out of training pipelines. A principal engineer at Reco rewrote JSONata in Go in about seven hours using AI assistance, cutting $500K/year in infrastructure costs. Golang Weekly 595 dropped with a solid naming conventions guide and a peek at Go 1.26 compiler internals. There’s also a subtle X.509 verification bug in Go’s crypto/x509 worth knowing about if you manage long-lived CA certs.</p>
<hr>
<h2>OpenCode signs zero data retention agreements for Go</h2>
<p>OpenCode announced that all AI providers used for Go now operate under Zero Data Retention agreements. Your code and queries won’t be stored or used for model training. For teams that were holding off on AI tooling for compliance reasons, this removes one of the more concrete objections.</p>
<hr>
<h2>Reco rewrites JSONata in Go, saves $500K/year</h2>
<p>Reco’s principal data engineer replaced a fleet of jsonata-js Kubernetes pods with a pure-Go library called gnata, spending about $400 in AI tokens over seven hours. The original setup cost roughly $300K/year and added ~150 microseconds of RPC overhead per evaluation across billions of events. gnata uses a two-tier architecture: a zero-allocation fast path for simple expressions operating directly on raw JSON bytes, and a full path for complete JSONata 2.x semantics. After a week of shadow-mode validation against 1,778 test cases, gnata replaced the RPC fleet entirely, delivering 25-1000x speedups. Combined with a rule engine refactor the new library enabled, total savings hit $500K/year.</p>
<hr>
<h2>Go’s X.509 verification silently fails on ASN.1 string type mismatches</h2>
<p>There’s a real gotcha in Go’s crypto/x509: if a CA certificate encodes its Subject using PrintableString (ASN.1 tag 0x13) while the leaf certificate’s Issuer uses UTF8String (0x0c), Go’s CertPool.byName map fails to match them because it does raw byte comparison. OpenSSL treats these as equivalent and verifies fine. Go throws a “certificate signed by unknown authority” error. This is a known open issue and can cause outages when certificate tooling evolves over time, producing inconsistent encodings between long-lived CA certs and newly generated leaf certs. Worth auditing if you manage your own PKI.</p>
<hr>
<h2>Antithesis launches Hegel, property-based testing across languages</h2>
<p>Antithesis is releasing Hegel, a family of property-based testing libraries that run Hypothesis as a backend server and wrap it with thin clients for each target language. The first release targets Rust, with Go, C++, OCaml, and TypeScript planned. The pitch is that every language gets Hypothesis-quality shrinking and test database behavior without reimplementing the engine. Given how much AI-generated code skips edge cases, the timing makes sense.</p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Go naming conventions guide:</strong> Alex Edwards published a thorough practical guide covering camelCase rules, acronym casing (HTTPClient not HttpClient), short receiver names, and the -er suffix for single-method interfaces — good reference to share with new team members.</li>
<li><strong>Outbox pattern in Go and Postgres:</strong> Solid walkthrough of solving the dual-write problem using FOR UPDATE SKIP LOCKED for concurrent relay workers, plus an alternative using pglogrepl for WAL-based change data capture.</li>
<li><strong>kqueue file watching on macOS:</strong> Deep dive into using kqueue from Go via the unix package, covering fd-per-file limitations and how it compares to FSEvents and polling.</li>
<li><strong>OpenTelemetry eBPF profiler and Go symbolization:</strong> Explains how the profiler resolves addresses using .gopclntab, which Go embeds in every binary (even stripped ones) because the runtime needs it for panic traces — making Go uniquely easy to profile with eBPF.</li>
<li><strong>Finite state machines for Go workflows:</strong> Practical guide to modeling order states with typed constants, enforcing valid transitions, and using DynamoDB conditional expressions for optimistic locking. Key insight: transition first, then mark as processed — not the other way around.</li>
<li><strong>Bank ledger in Go and Postgres:</strong> Covers double-entry accounting schema, sqlc for type-safe SQL, serializable isolation with retry logic, and row-level locking — useful reference for anyone building financial primitives.</li>
<li><strong>Hugo v0.159.0:</strong> Deprecates site.Data in favor of hugo.Data, fixes panics on missing pages, and updates goldmark and grpc dependencies.</li>
<li><strong>Groadmap:</strong> A Go CLI tool for managing roadmaps and sprints via local SQLite, designed for agentic workflows with Claude Code integration and JSON output for programmatic consumption.</li>
<li><strong>neomd:</strong> A minimal terminal email client built with Go and the Charm ecosystem — emails composed in Neovim, rendered as Markdown via Glamour, with IMAP/SMTP direct connection and a HEY-style sender screener.</li>
<li><strong>cliamp:</strong> A Winamp-inspired terminal music player in Go supporting local files, internet radio, YouTube, Spotify, and Navidrome, with a spectrum visualizer and parametric EQ.</li>
<li><strong>Structured concurrency in Go:</strong> Good conceptual post tracing from single-threaded error handling through to errgroup, arguing that structured concurrency makes bugs visible during development rather than turning them into silent deadlocks.</li>
</ul>


Go language updates, concurrency patterns, and community projects.

Go Digest

A roundup of Go ecosystem news: OpenCode has signed zero data retention agreements with all AI providers, ensuring code isn't used for model training. A principal engineer at Reco rewrote JSONata in Go (gnata) using AI assistance in ~7 hours, replacing costly Kubernetes RPC pods and saving $500K/year with 25-1000x speedups. A subtle Go crypto/x509 bug causes silent verification failures when CA and leaf certs use different ASN.1 string encodings (PrintableString vs UTF8String), unlike OpenSSL which treats them as equivalent. Antithesis is launching Hegel, a cross-language property-based testing library backed by Hypothesis. Additional items cover Go naming conventions, the outbox pattern with Postgres, kqueue file watching, OpenTelemetry eBPF profiling, finite state machines for workflows, bank ledger patterns, and several new Go CLI tools.

OpenCode locks down data retention, a Go JSONata rewrite saves $500K