---
id: ADR-PFM-TNL-006
title: Retained Construction Work After Failure
product_area: platform
module: tenant-lifecycle
revision: 1
status: proposed
design_intent: confirmed
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
decision: Retain completed construction work after provisioning failure and require staff to choose retry or the
  ordinary deletion-request process.
constrains:
- DOM-PFM-TNL-002
- STATE-PFM-TNL-001
- STATE-PFM-TNL-002
- WF-PFM-TNL-003
- WF-PFM-TNL-004
- SVC-PFM-TNL-tenants
origin: services-platform:docs/tenants/tenant-lifecycle-plan.md#§4.4 No automatic compensation (approved 2026-10-09)
alternatives:
- option: Roll back every participant on failure
  why_not: Cross-service compensation adds another partially failing workflow.
- option: Delete the workspace immediately on failure
  why_not: Immediate disposal would remove the selection and waiting safeguards.
consequences:
- A retry links another attempt and carries completed steps.
- Customers cannot ordinarily enter failed construction, while staff can inspect it through authorized routes.
- Disposal uses normal waits, including disposable precedence and unopened-workspace treatment.
supersedes: []
evidence:
- 'services-platform at ad3f6a65: modules/tenants/services/provisioning/provision-tenant-failure.ts; services/deletion/waiting-period.ts.'
---

# Retained Construction Work After Failure

## Context

Construction spans database and provider resources. Partial work remains useful for diagnosis and can be adopted by a later attempt.

## Decision

Retain completed construction work after provisioning failure and require staff to choose retry or the ordinary deletion-request process.

## Alternatives Considered

Roll back every participant on failure: Cross-service compensation adds another partially failing workflow. Delete the workspace immediately on failure: Immediate disposal would remove the selection and waiting safeguards.

## Consequences

A retry links another attempt and carries completed steps. Customers cannot ordinarily enter failed construction, while staff can inspect it through authorized routes. Disposal uses normal waits, including disposable precedence and unopened-workspace treatment.