---
id: ADR-PFM-DJE-011
title: Keep partial migration loads and recover by reset
product_area: platform
module: data-job-engine
revision: 1
status: proposed
design_intent: proposed
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
  services-crm: a8d1364f1dd44b723bb5f9acba12f983e9ec8d69
decision: >-
  A failed or cancelled run preserves committed loads; supported workspace reset
  clears loaded records and job mappings while retaining uploads, run history
  and designated configuration.
constrains:
  - DOM-PFM-DJE-005
  - WF-PFM-DJE-012
  - WF-PFM-DJE-013
  - WF-PFM-DJE-014
  - SVC-PFM-DJE-data-jobs
origin: >-
  services-platform:docs/proposals/rhythm-data-job-engine-plan.md §13.3 reset
  and reload (approved 2026-10-12); PLAT-M19 D5
alternatives:
  - option: Compensate every dataset after failure
    why_not: Import jobs do not offer the update rollback mechanism.
  - option: Load a staging workspace and copy it after success
    why_not: >-
      The cited plan selects loading the destination while it remains in its
      loading state.
consequences:
  - Staff inspect partial results and choose whether to reset and reload.
  - >-
    The implementation limits reset to sandbox workspaces in implementation
    status and loading state.
  - A reset that fails partway leaves partial deletion and can be repeated.
supersedes: []
evidence:
  - >-
    services-platform at ad3f6a65: services/runs/run-driver.ts;
    docs/data-jobs/tenant-reset.md
---

# Keep Partial Migration Loads And Recover By Reset

## Context

A migration can fail after some datasets have already committed.

## Decision and Origin

A failed or cancelled run preserves committed loads; supported workspace reset clears loaded records and job mappings while retaining uploads, run history and designated configuration. The origin recorded above supplies the authority for this choice; implementation evidence supplies the limits described here.

## Alternative Comparison

Compensate every dataset after failure: Import jobs do not offer the update rollback mechanism.

Load a staging workspace and copy it after success: The cited plan selects loading the destination while it remains in its loading state.

## Consequences

Staff inspect partial results and choose whether to reset and reload.

The implementation limits reset to sandbox workspaces in implementation status and loading state.

A reset that fails partway leaves partial deletion and can be repeated.