---
id: ADR-COM-FUL-010
title: Detect operational inconsistency and delegate its repair
product_area: commerce
module: fulfillment
revision: 1
status: proposed
design_intent: proposed
source_sha:
  services-commerce: c8b66a98e2490617aec38ba5c8165dd9bd0a8f9b
decision: >-
  Raise diagnoses and delegate changes to owning processes, with expired-hold
  release as the limited automatic correction.
constrains:
  - WF-COM-FUL-007
  - WF-COM-FUL-018
  - SVC-COM-FUL-operations
  - SVC-COM-FUL-inventory
origin: >-
  services-commerce:docs/migrations/operations/README.md#D-P5-07, #D-P5-08,
  #D-P5-09, #D-P5-16; docs/migrations/inventory/README.md#D-P8I-24 (Q08, Andrew
  2026-10-19)
alternatives:
  - option: Automatically repair each reconciliation diagnosis.
    why_not: Direct repair could bypass the owner’s validation and stable request keys.
  - option: Move existing Orders sweep passes into the reconciler.
    why_not: >-
      Retaining existing sweep ownership avoids two processes performing the
      same recovery.
consequences:
  - Order and stock diagnoses remain separate finding collections.
  - >-
    Three declared checks are skipped and dead-letter depth is measured without
    a finding.
  - >-
    Cross-workspace detection writes each diagnosis under its subject’s
    workspace.
supersedes: []
evidence:
  - >-
    services-commerce at c8b66a98:
    modules/operations/services/reconciler/reconciler.ts;
    modules/inventory/services/reconciliation/nightly-inventory.ts.
---

# Detect operational inconsistency and delegate its repair

## Context

Cross-workspace checks should not become ungoverned replacements for delivery or financial processes.

## Decision

Raise diagnoses and delegate changes to owning processes, with expired-hold release as the limited automatic correction.

## Alternatives Considered

Automatically repair each reconciliation diagnosis. Direct repair could bypass the owner’s validation and stable request keys.

Move existing Orders sweep passes into the reconciler. Retaining existing sweep ownership avoids two processes performing the same recovery.

## Consequences

Declared placeholder checks provide no detection. Warehouse and order findings remain separate attention collections.