01must proveConfirmed | A merge plan requires two to ten distinct records of one type and a survivor among them; invalid counts, repeats and outside survivors are rejected, missing records return not found and absorbed records report their survivor. ✓ For example, four records of one member are planned as one merge.✗ By comparison, eleven records are refused; the plan states the limit of ten. no proof recorded yet | validation | api, service, database | test |
02must proveConfirmed | All plan operations require the relevant type's read and merge permissions, deny cross-type authority and reject callers who can merge neither type before looking up a plan. no proof recorded yet | permission | api | test |
03must proveConfirmed | Survivor recommendation chooses the sole portal-linked participant, then the sole integration-addressed participant, then the uniquely most referenced participant, then the oldest; organizations omit the login criterion. no proof recorded yet | calculation | service | test |
04must proveConfirmed | A requested participant remains survivor even when the recommendation differs; without an explicit survivor, planning uses the recommendation. no proof recorded yet | policy | service | test |
05must proveConfirmed | Recommendations explain their reasons using record names and numbers, mark an age-only choice as weak and never favor recency or completeness. no proof recorded yet | policy | service | test |
06Confirmed | Participant summaries include creation and modification times, named status and type, login and integration presence, inbound reference counts and the information each contributes. | policy | service | test |
07Confirmed | Merge-authorized callers read service limits of two to ten participants, 100,000 related rows and 100,000 organization employees; the console obtains those limits from the service. | policy | api | test |
08must proveConfirmed | Participant or survivor changes recompute the plan, carry decisions for surviving questions and report discarded decisions while enforcing at least two participants. no proof recorded yet | lifecycle | service | test |
09Confirmed | Unfinished plans with decisions-needed, ready or blocked status list one type, default to the caller's plans and sort by latest change with 25 default and 50 maximum per page; editing does not transfer ownership. | policy | api, service | test |
10must proveConfirmed | A five-minute sweep expires open plans seven days after their last change, preventing further changes or execution while leaving executed plans unchanged. no proof recorded yet | lifecycle | service | test |
11Confirmed | Any workspace caller with both read and merge permissions for the plan's type may read and edit it regardless of its creator. | permission | api | observed |
12Confirmed | Once created, the console replaces the launcher with the plan's own address so the administrator can leave and resume it. | policy | console | test |