---
id: ADR-CRM-REG-010
title: 'Region Locks Need Dedicated, Audited Actions'
product_area: crm
module: regions
revision: 2
status: proposed
design_intent: confirmed
source_sha:
  services-crm: a8d1364f1dd44b723bb5f9acba12f983e9ec8d69
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
decision: >-
  Regional customer locks should use dedicated authorized audit-producing actions, while the current
  ordinary-write lock fields and unused rule-lock storage remain implementation gaps.
constrains:
  - DOM-CRM-REG-001
  - DOM-CRM-REG-002
  - SVC-CRM-REG-regions
  - WF-CRM-REG-005
origin: 'D-08 (Andrew, 2026-10-19), cited in services-crm:docs/milestones/CRM-M3-crm-configuration.md#D-08'
alternatives:
  - option: Continue accepting lock fields through ordinary edits.
    why_not: >-
      An updater can create a full lock that ordinary edits cannot remove, or clear a delete lock by omitting
      it during replacement.
  - option: Remove regional lock capability.
    why_not: 'The recorded shared policy retains customer locks, including protection for integrated configuration.'
consequences:
  - The regional lock plan lists dedicated actions as outstanding.
  - Stored rule locks have no enforced operational behavior until rule-lock applicability is resolved.
supersedes: []
evidence:
  - >-
    services-crm at a8d1364f: docs/record-locks.md#Not covered yet; modules/regions/aws/api/regions.routes.ts
    (toWriteInput, toRuleInput); db/region-assignment-settings.table.ts (lockedCheck).
---

# Region Locks Need Dedicated, Audited Actions

## Context

The recorded lock policy separates lock management from ordinary editing and requires authorized reversible actions with audit. Regional definitions have not received that surface.

## Decision

The product should introduce regional lock and unlock actions with their own authority and stop ordinary requests from managing locks. This records an existing policy obligation and its missing implementation, rather than deciding the policy again.

## Alternatives Considered

Continue accepting lock fields through ordinary edits. An updater can create a full lock that ordinary edits cannot remove, or clear a delete lock by omitting it during replacement.

Remove regional lock capability. The recorded shared policy retains customer locks, including protection for integrated configuration.

## Consequences

The regional lock plan lists dedicated actions as outstanding. Stored rule locks have no enforced operational behavior until rule-lock applicability is resolved.