Sweep and settle released catalog files
What It Does
Background work removes files no saved record retains. A scheduled sweep queues due work and a reference-aware consumer settles it without deleting still-used assets.
The Flow
When Something Fails
Fail the run and allow later sweeps to recover due work; invocation and queue alarms support investigation. Due files remain until cleanup can claim and settle them. Report individual failed receipts for retry; the final permitted receive records failure and the message reaches the dead-letter queue. Failed assets remain stored with their failure trace.
Open Design Questions
The implemented recovery and concurrency behaviour above defines the current boundary. Any change to transaction scope or product authority requires a recorded decision.