Owned Template Changes Cross the Product Transaction Boundary

Context

Confirmation selection is local, but its owned content belongs to Platform. The implementation waits for Platform without making it part of Accounting's transaction.

Decision

Accounting calls Platform to save or clear owned content before local product commit and attempts cleanup after deletion, logging failures without compensation.

Alternatives Considered

Validate remotely before committing locally, then compensate a failed remote write. The code has no such orchestration, and compensation would still need defined recovery.

Clear templates before committing deletion. Platform outages would then block otherwise permitted product removal.

Consequences

Recovery and durable reconciliation remain unresolved. The observed call order supplies no guarantee that remote and local records commit together.