01Proposed | Migration serves twelve collections with eleven job operations each: stores, ordering profiles, orders, promotions, redemptions, categories, listings, merchandise option sets, merchandise, warehouses, locations and stock items. | policy | api | test |
02must proveProposed | Submission accepts up to 500 prepared records in validate or apply mode with insert, upsert or update semantics, rejects patch selections, and requires a source key or identity per record and a source system for keyed records. | validation | api | test |
03must proveProposed | Data jobs require collection bulk authority and recheck record-write authority, rejecting read-only job callers and portal members. | permission | api, service | test |
04must proveProposed | Repeating an identical submission under its idempotency key returns the existing job marked reused. | invariant | service | test |
05must proveProposed | Validation records impact without writes, and apply rejects an absent or mismatched validation-impact digest. | validation | service | test |
06must proveProposed | Bulk-key holders can inspect all jobs in their collection and other callers only their own, while cross-collection job reads and mismatched collection submissions are rejected. | permission | service | test |
07must proveProposed | Initial import requires an implementation workspace in loading state, where job routes remain available and ordinary routes are closed. | policy | api, service | test |
08must proveProposed | Batch execution reloads the submitter's permissions, fails the job if authority was revoked, avoids duplicate application on redelivery and dead-letters unreadable messages. | permission | service | test |
09must proveProposed | Missing references defer records with the dependency field identified, typed failures retain their code, duplicate errors disclose constraint names rather than colliding values, and dropped connections are transient. | policy | service | test |
10must proveProposed | Readback accepts up to 100 source keys, returns imported shapes and missing-key lists and excludes records from other workspaces. | permission | service | test |
11must proveProposed | Migrated orders preserve original numbers, arrive accepted, billed and marked migrated, create completed or blocked item-line obligations and defer unresolved invoice linking for a later same-key relink. origin: D-C-04 (build decision, not a product ruling): services-commerce:docs/migrations/data-operations/README.md | policy | service | test |
12must proveProposed | Migrated stock opening uses count-correction and damage ledger entries instead of direct balance writes, rejecting repeat keys and inactive destinations. | invariant | service | test |
13Proposed | Pause, resume, cancellation and retry take effect between batches, and cancellation preserves and reports already committed records. | lifecycle | api, service | observed |