durable operation2–3 hr5 stages8 code languages

Operating journey: Navigation built for intermittent connectivity

Reliable guidance across coverage gaps without giving up traffic, search freshness, or safety.

The real-world moment

A vehicle crosses a long connectivity gap after receiving a regional data update the night before. Navigation must boot with a compatible signed offline package, plan and guide locally, blend online traffic/search when available, protect driver attention, and recover automatically if the new package or runtime is unhealthy.

Make ownership visible before code.

Operate the full lifecycle with versioned state, hostile-path recovery, audit, and release evidence.

Application state
stateful
Planning calls
0
Credentials accepted
No
Write authority
None
01
Vehicle/OEM identity

Activate the head unit

Owns hardware, market/region, entitlement, runtime compatibility, privacy/consent, activation and update campaign.

Vehicle manifest ↔ hardware/runtime/region/entitlement versions

GETGets the live data of devices./deviceThis is a supporting operation from the selected product stack, not proof of an exact provider contract for this stage. Resolve the stage through its product source or adapter boundary before live implementation.

Record stage 1 with the application identity, source fingerprint, request or aggregate identity, timestamp, and observable outcome.

Power loss during update

Write only the inactive slot and switch one atomic pointer after verification; boot always finds a previously acknowledged package.

02
Dual-slot offline runtime

Install compatible signed regional data

Maintains one active and one staged signed package, atomic activation pointer, health acknowledgement and rollback evidence.

Data package ↔ epoch, region, size, content/signature hash, compatibility

GETGeocode API/api/places/geocodeThis is a supporting operation from the selected product stack, not proof of an exact provider contract for this stage. Resolve the stage through its product source or adapter boundary before live implementation.

Record stage 2 with the application identity, source fingerprint, request or aggregate identity, timestamp, and observable outcome.

Online traffic disappears mid-route

Keep guiding from the last valid local route, mark traffic freshness and avoid blocking safety-critical guidance.

03
Local navigation

Plan and guide offline

Search index, routing graph, guidance and map rendering operate without network under pinned runtime/data/profile versions.

Route session ↔ offline/online sources, profile, data/traffic versions

GETRouting API/{REST_KEY}/{resources}/{profile}/{geopositions}This is a supporting operation from the selected product stack, not proof of an exact provider contract for this stage. Resolve the stage through its product source or adapter boundary before live implementation.

Record stage 3 with the application identity, source fingerprint, request or aggregate identity, timestamp, and observable outcome.

New package boots but fails route smoke test

Fail health acknowledgement, restore the prior slot and upload privacy-safe diagnostics when connectivity returns.

04
Online enhancement

Blend online traffic and search when available

Trusted cloud boundary adds fresh search, traffic and telemetry only when entitled and available; responses carry freshness/provenance.

Update event ↔ campaign, stage, evidence, event/receipt time, health/rollback outcome

GETGets the historical location events of a device./devices/{deviceId}/eventsThis is a supporting operation from the selected product stack, not proof of an exact provider contract for this stage. Resolve the stage through its product source or adapter boundary before live implementation.

Record stage 4 with the application identity, source fingerprint, request or aggregate identity, timestamp, and observable outcome.

Power loss during update

Write only the inactive slot and switch one atomic pointer after verification; boot always finds a previously acknowledged package.

05
Fleet operations

Stage atomic map and runtime updates

Campaign, download, verification, activation, health, rollback and support diagnostics are stateful journeys with aggregate metrics.

Vehicle manifest ↔ hardware/runtime/region/entitlement versions

GETGets drive details of a device./devices/drivesThis is a supporting operation from the selected product stack, not proof of an exact provider contract for this stage. Resolve the stage through its product source or adapter boundary before live implementation.

Record stage 5 with the application identity, source fingerprint, request or aggregate identity, timestamp, and observable outcome.

Online traffic disappears mid-route

Keep guiding from the last valid local route, mark traffic freshness and avoid blocking safety-critical guidance.

Edit once. Generate eight trusted-runtime implementations.

The recipe starts from the normalized GET /{REST_KEY}/{resources}/{profile}/{geopositions} contract. Execute six deterministic fixture outcomes before an issued account is involved.

Local request composerCode stays local · fixtures are explicit
GETRequest inputs
12 editable · 1 protected
Generated in eight languages
Environment-backed credentials
GEThttps://apis.mapmyindia.com/advancedmaps/v1/${MAPPLS_REST_KEY}/route_eta/driving/28.612964%2C77.229463?geometries=polyline&rtype=0&steps=true&exclude=ferry&region=IND&bearings=180&alternatives=2&radiuses=100%3B100&overview=simplified
Credential-free sandboxExecute this contract without a provider call
How fixtures work
Generated from your inputs
curl --request GET \
  --url "https://apis.mapmyindia.com/advancedmaps/v1/${MAPPLS_REST_KEY}/route_eta/driving/28.612964%2C77.229463?geometries=polyline&rtype=0&steps=true&exclude=ferry&region=IND&bearings=180&alternatives=2&radiuses=100%3B100&overview=simplified" \
  --header "Accept: application/json"

Credential-safe by constructionSet MAPPLS_REST_KEY only in your trusted runtime. Code generation stays local. Sandbox execution sends only bounded fixture inputs to this developer platform and never reads a credential or calls Mappls.

Break the journey before customers do.

These controls are required at this operating depth; deeper recipes add durable truth rather than merely more API calls.

Idempotent commandsOptimistic aggregate versionsEvent and receipt timeTransactional outboxUnknown-outcome reconciliationIndependent human decisionsRestart recoveryImmutable audit evidence

Definition of done

Every aggregate has an invariant, expected version, stable command identity, and attributable actor.

Duplicate, late, reordered, invalid, stale, timed-out, and restarted execution preserve one durable truth.

Unknown provider outcomes reconcile by original identity before replay or compensation.

Terminal decisions, human review, audit, outbox delivery, privacy, retention, and rollback remain independently evidenced.

Contracts, tutorials, and journeys stay linked.

Contract set

GETRouting API/{REST_KEY}/{resources}/{profile}/{geopositions}GETGeocode API/api/places/geocodeGETGets the live data of devices./deviceGETRouting API with driving profile/{REST_KEY}/{resources}/driving/{geopositions}GETNearby API/api/places/nearby/jsonGETGets the historical location events of a device./devices/{deviceId}/eventsGETRouting API with trucking profile/{REST_KEY}/{resources}/trucking/{geopositions}GETAutoSuggest API/api/places/search/jsonGETGets drive details of a device./devices/drivesGETRouting API with biking profile/{REST_KEY}/{resources}/biking/{geopositions}GETText Search API/api/places/textsearch/jsonGETGets the live data of devices./devices

Durable state machines

statefulConnected fleet trip6 states · 7 transitionsstatefulFleet geofence exception6 states · 5 transitionsstatefulCoordinated incident response7 states · 8 transitionshybridRecoverable navigation session6 states · 6 transitionshybridDurable multi-stop itinerary6 states · 9 transitionsstatefulConsented address verification9 states · 11 transitionsstatefulOffline automotive release7 states · 7 transitionshybridiOS direction planning and navigation handoff8 states · 8 transitionshybridiOS geofence draft and publication boundary6 states · 6 transitions

Care Transfer Desk

Confirm the correct receiving entrance, assign eligible transport, preserve courier custody, review condition exceptions, and reconcile receiver acceptance without retaining patient or clinical data.

Source-grounded, not authority-granting

This recipe composes source-derived contracts, application architecture, fixtures, and maintained learning evidence. It does not prove package availability, provider payload shape, account entitlement, regional behavior, production compatibility, or release approval.