[论文解读] Speak Now: Safe Actor Programming with Multiparty Session Types (Extended Version)

Simon Fowler, Raymond Hu|arXiv (Cornell University)|Feb 27, 2026

Logic, programming, and type systems被引用 0

一句话总结

Maty 是将静态多方会话类型与完整的 actor 灵活性相结合的首个语言，支持多会话并发与安全的故障处理.

ABSTRACT

Actor languages such as Erlang and Elixir are widely used for implementing scalable and reliable distributed applications, but the informally-specified nature of actor communication patterns leaves systems vulnerable to costly errors such as communication mismatches and deadlocks. Multiparty session types (MPSTs) rule out communication errors early in the development process, but until now, the many-sender, single-receiver nature of actor communication has made it difficult for actor languages to benefit from session types. This paper introduces Maty, the first actor language design supporting both static multiparty session typing and the full power of actors taking part in multiple sessions. Maty therefore combines the error prevention mechanism of session types with the scalability and fault tolerance of actor languages. Our main insight is to enforce session typing through a flow-sensitive effect system, combined with an event-driven programming style and first-class message handlers. Using MPSTs allows us to guarantee communication safety: a process will never send or receive an unexpected message, nor will a session get stuck because an actor is waiting for a message that will never be sent. We extend Maty to support Erlang-style supervision and cascading failure, and show that this preserves Maty's strong metatheory. We implement Maty in Scala using an API generation approach, and demonstrate the expressiveness of our model by implementing a representative sample of the widely-used Savina actor benchmark suite; an industry-supplied factory scenario; and a chat server.

研究动机与目标

• 推动在基于 actor 的分布式系统中防止通信错误的需求
• 通过移除基于通道的假设并实现非通道、响应式编程，将多方会话类型扩展到与 actors 一起工作
• 允许 actors 同时参与多个会话，同时保持安全性与活性属性
• 在不破坏核心元理论的前提下，结合 Erlang 风格的监督与级联失败
• 提供基于 Scala 的实现，并通过基准测试、工厂场景研究与聊天室服务器进行验证

提出的方法

• 采用事件驱动的 actor 模型，代理对消息做出反应并挂起以等待未来消息
• 通过对流程敏感的效应系统来强制执行会话类型，而非显式通道，以保持类型安全
• 允许 actors 在许多并发会话中进行无限制且动态的参与，并在会话之间进行有状态的协调
• 使用自消息和状态对会话之间的交互进行建模，从而实现会话切换和跨会话效应
• 扩展模型以监督层级结构来支持故障处理和恢复，同时保持类型保证
• 通过在 Scala 中实现 API 生成来实现 Maty，并利用基准测试、工厂场景和聊天室服务器来验证

(a) Channels

实验结果

研究问题

• RQ1 如何在不暴露通道的情况下，在 actor 编程模型中静态强制执行多方会话类型（KP2）？
• RQ2 actors 是否能够安全地参与多个并发会话并仍然保证无死锁通信（KP3、KP4）？
• RQ3 如何在不影响强元理论的前提下整合故障处理与监督（KP5）？
• RQ4 该方法是否对现实基准和实际场景（如工厂和聊天室服务器）具有可扩展性？

主要发现

• Maty 为 actors 提供静态的多方会话类型，并保证进程不会发送或接收意外的消息
• Maty 证明了进展性与保持性，产生包括全局会话进展在内的强元理论
• Maty 在不破坏安全性保证的前提下扩展了 Erlang 风格的监督和级联故障
• 基于 Scala 的实现采用 API 生成方法，并在 Savina 的基准、工厂案例研究与聊天室服务器上展示了该模型
• 实现通过呈现 Savina 代表性用例、工厂场景和聊天室服务器，展示了表达能力

(b) Actors