Retain merge originals with workspace history
Context
Repairing an incorrect merge requires information from records that no longer exist.
Decision
Merge history retains the original and resulting values for the workspace lifetime, with application deletion denied and removal delegated to workspace purge.
Alternatives Considered
Discard originals after ninety days. Late discovery of an incorrect merge would leave no complete repair evidence.
Retain only decisions and identities. Staff could explain the action but could not reconstruct the removed values.
Consequences
Workspace exports include the originals held by merge history. The recorded right to remove an individual’s originals has no implemented operation.