---
id: ADR-PFM-DJE-020
title: Decided evidence retention exceeds implemented purging
product_area: platform
module: data-job-engine
revision: 1
status: proposed
design_intent: confirmed
source_sha:
  macroservice-libraries: 54536a441935c6e09fdb7f96f0bec71c52ba4e03
  services-crm: a8d1364f1dd44b723bb5f9acba12f983e9ec8d69
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
decision: >-
  The cited decision retains job evidence for 90 days after completion and
  idempotency keys for 30 days; only CRM’s 30-day submission-key purge is
  implemented.
constrains:
  - DOM-PFM-DJE-001
  - WF-PFM-DJE-018
  - WF-PFM-DJE-005
  - SVC-PFM-DJE-crm-data-jobs
  - SVC-PFM-DJE-data-jobs
origin: >-
  PLAT-M19 D6 retention (Andrew, 2026-10-12): 90 days after the job ends, also
  the rollback window; API workload governance brief 3.1 (30-day ledger purge)
alternatives:
  - option: Retain all evidence indefinitely
    why_not: Unbounded receipts and refusals would continue accumulating.
  - option: Purge evidence only when removing a workspace
    why_not: Active workspaces would have no age-based limit.
consequences:
  - >-
    The absent evidence sweep allows growth and supported rollback beyond the
    decided window.
  - Platform submission keys have no scheduled age purge.
  - >-
    Removing receipts under a future sweep must also end receipt-dependent
    rollback.
supersedes: []
evidence:
  - >-
    macroservice-libraries at 54536a44: src/submission-purge.ts; README.md#The
    submission ledger's retention
  - 'services-crm at a8d1364f: services/jobs/data-job-submission-purge.ts'
---

# Decided Evidence Retention Exceeds Implemented Purging

## Context

Evidence supports inspection and rollback but grows with completed work.

## Decision and Origin

The cited decision retains job evidence for 90 days after completion and idempotency keys for 30 days; only CRM’s 30-day submission-key purge is implemented. The origin recorded above supplies the authority for this choice; implementation evidence supplies the limits described here.

## Alternative Comparison

Retain all evidence indefinitely: Unbounded receipts and refusals would continue accumulating.

Purge evidence only when removing a workspace: Active workspaces would have no age-based limit.

## Consequences

The absent evidence sweep allows growth and supported rollback beyond the decided window.

Platform submission keys have no scheduled age purge.

Removing receipts under a future sweep must also end receipt-dependent rollback.