---
id: ADR-PFM-LLM-011
title: Attempt Administrator Notices After Commit With Bounded Retry
product_area: platform
module: llm
revision: 1
status: proposed
design_intent: proposed
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
decision: >-
  Send threshold email to the recorded interim Administrator audience after crossing commit, using ten-minute
  claims and at most three attempts while allowing duplicates and missing delivery.
constrains:
  - WF-PFM-LLM-005
  - STATE-PFM-LLM-006
  - WF-PFM-LLM-008
  - SVC-PFM-LLM-llm
  - RESP-PFM
origin: >-
  Recipients by D-4 (Andrew, 2026-10-18: the built-in Administrator role, for now, until responsibilities
  exist) (services-platform:docs/proposals/llm-observability/11-decisions.md#Decision record); the direct
  e-mail path is reported as settled by inspection
  (services-platform:docs/proposals/llm-observability/11-decisions.md#11.1 Settled by inspection (reported)).
alternatives:
  - option: Move to registered Platform notifications
    why_not: >-
      The current implementation uses the earlier shared email helper; migration remains the recorded open
      question.
  - option: Promise exactly one delivered message
    why_not: Neither stamping before nor after an external send makes delivery and bookkeeping atomic.
  - option: Send before the crossing transaction commits
    why_not: A rolled-back crossing can still have produced a customer email.
consequences:
  - Notice-start and delivery errors do not undo settlement.
  - No eligible administrators produces zero-recipient completion.
  - This path records no notification delivery history and does not consult notification preferences.
  - A sender that outlasts its lease can overlap another attempt.
  - The recorded responsibility-based audience direction should replace the interim resolver when decided.
supersedes: []
evidence:
  - >-
    services-platform at ad3f6a6: modules/llm/services/notices/threshold-notice.ts,
    retry-threshold-notices.ts, override-notice.ts; lib/notices/recipients.ts, send-notice.ts;
    docs/notifications.md.
---

# Attempt Administrator Notices After Commit With Bounded Retry

## Context

Usage warnings need an audience and delivery bookkeeping independent of request settlement.

## Decision

Send threshold email to the recorded interim Administrator audience after crossing commit, using ten-minute claims and at most three attempts while allowing duplicates and missing delivery.

## Alternatives Considered

Move to registered Platform notifications: The current implementation uses the earlier shared email helper; migration remains the recorded open question.

Promise exactly one delivered message: Neither stamping before nor after an external send makes delivery and bookkeeping atomic.

Send before the crossing transaction commits: A rolled-back crossing can still have produced a customer email.

## Consequences

Notice-start and delivery errors do not undo settlement. No eligible administrators produces zero-recipient completion. This path records no notification delivery history and does not consult notification preferences. A sender that outlasts its lease can overlap another attempt. The recorded responsibility-based audience direction should replace the interim resolver when decided.