Retracted: v1.36.21 does not compile: mcp.go calls networkOf, which was staged in a
file the commit left behind. It built locally because the working tree held
both halves, which is the whole lesson — verify the commit, not the
directory it came from.
The tag is not moved. A version is a permanent address, and a consumer that
already resolved to it must keep getting the same bytes. Retract is how Go
says "published in error" without rewriting history: the resolver stops
choosing it, `go list -m -versions` stops offering it, and anyone pinned to
it is told rather than silently moved. v1.36.22 is the re-cut.
subsystem-mount example — HIP-0106 Mount(app, deps) idiom.
One zip.App is composed from N subsystems via the Mount(...) contract.
Each subsystem is a Go package that exposes:
func Mount(app *zip.App, deps Deps) error
matching the gin-side hanzoai/commerce/checkout.MountPublic pattern.
Each subsystem declares TYPED ops, which is what makes composition compose the
whole surface: the assembled binary's OpenAPI document, MCP tool list and
command line are the union of what its subsystems registered, with nothing
written twice and no subsystem knowing the others exist. A subsystem that
registered untyped routes would contribute traffic and nothing else.