Execute A Merge
What It Does
Submission persists a durable attempt before background execution. The worker replans under lock and applies all business changes within one transaction, including calls to application-owned participant functions.
The Flow
When Something Fails
Business rollback requires no compensating changes. The executor normally records caught failures, including lock timeouts, and the task reports those as refusals rather than retrying the business attempt. Transient errors outside that completed failure handling may be retried. Lost workflows need reconciliation, and post-commit projections and announcements can still lag.
Open Design Questions
The default-off owner-deletion safety check outside development needs explicit preparation. Organization announcements, deletion of later survivors and conflicting lost-start timing remain recorded open edges.