Accounting scheduling and lifecycle service
What This Service Is For
Maintenance times recurring Accounting work and supplies bounded provisioning, export and erasure steps to Platform. It also gates Accounting requests against observed workspace availability.
Boundary
Owning modules save their schedule definitions and implement business handlers. Maintenance supplies recurrence, dispatch and history. Platform owns lifecycle transitions and continuation; participant declarations and dataset readers also live beside other Accounting modules.
Operations in Words
Staff can preview recurrence without saving and read history only with the owning record’s read permission. Internal lifecycle calls describe participants, provision and verify setup, count remaining rows, purge one batch or export one dataset batch. None is a Submissions intake operation.
Events and Jobs
The dispatcher commits before publishing. Explicit publication refusal releases the offered run, but a crash in that gap can strand it. The consumer can repeat unfinished handler work, including concurrent duplicate deliveries. Expected business refusals settle without retry; unexpected errors redeliver, with successful final failure recording acknowledged rather than sent to the dead-letter queue.
Consistency Guarantees
Provisioning uses conflict-safe insertion. Purge is bounded, guarded and irreversible after commit. Export checks recognized secret shapes, not every possible secret, and its creation cutoff does not provide a value snapshot. Cache delays affect ordinary availability; purge reads standing afresh. Posting prepared by a scheduled close has a separate post-commit start boundary.