Make LangGraph Agents Durable with Dapr Workflow - Supply Chain Auditor

Dependabot opens a pull request and its changelog says "documentation only" — but a changelog is written by whoever published the release, including an attacker. The classic supply-chain attack hides malicious code inside an update whose notes read as innocent. In this self-paced track you'll run an AI agent that checks a dependency bump's release notes against its real source changes, and see how Dapr Workflow makes that audit durable.

What you'll run

You'll run the Supply Chain Auditor, a LangGraph pipeline that audits a real Dependabot PR: it gathers the release notes and the source diff, then has Claude judge whether they match. Every stage is a checkpointed Dapr Workflow activity, so crashing mid-audit resumes from durable state instead of paying for Claude twice.

Ensure you have your own Anthropic API key before you start this track.

In this self-paced track, you'll learn:

• Why durable execution matters when one node in a pipeline makes an expensive, non-idempotent LLM call.
• How each LangGraph pipeline node becomes a Dapr Workflow activity checkpointed to a Redis state store.
• How a real mid-run crash resumes from durable state instead of re-fetching from GitHub or calling Claude again.