---
id: ADR-PFM-INT-020
title: Workspace deletion removes protected history before ordinary rows
product_area: platform
module: integrations
revision: 1
status: proposed
design_intent: proposed
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
decision: >-
  Use resumable deletion participants to purge database records. Remove protected integration history before
  ordinary rows through privileged code; retain extension handler secrets under the current declared policy.
constrains:
  - WF-PFM-INT-023
  - SVC-PFM-INT-integrations
  - SVC-PFM-INT-extensions
  - SVC-PFM-INT-workflow-actions
  - RESP-PFM
alternatives:
  - option: Depend on deletion cascading from the workspace record.
    why_not: 'Restricted references and protected history require an observable, resumable cleanup sequence.'
consequences:
  - Inventory reports expose records still awaiting cleanup.
  - >-
    Undeclared credential secrets and stored provider material survive database deletion and require a
    retention decision.
  - Provisioning seeds a default business calendar through the lifecycle seed ledger.
origin: FND-PFM-INT-037; OQ-PFM-INT-005
supersedes: []
evidence:
  - >-
    services-platform at ad3f6a65: modules/*/services/maintenance/tenant-participant.ts;
    modules/tenants/services/lifecycle/participants.ts
---

# Workspace deletion removes protected history before ordinary rows

## Context

Database cleanup and external material retention are separate responsibilities.

## Decision

Use resumable deletion participants to purge database records. Remove protected integration history before ordinary rows through privileged code; retain extension handler secrets under the current declared policy.

## Alternatives Considered

Depend on deletion cascading from the workspace record. Restricted references and protected history require an observable, resumable cleanup sequence.

## Consequences

Inventory reports expose records still awaiting cleanup.

Undeclared credential secrets and stored provider material survive database deletion and require a retention decision.

Provisioning seeds a default business calendar through the lifecycle seed ledger.