Request-scoped cancellation in Go: context boundaries for HTTP services
Create one bounded request context at HTTP ingress, pass it as the first argument, derive short-lived children for sub-operations, and never store context in long-lived structs to avoid leaked goroutines.
go