Cover arrangement lifecycle

The Lifecycle

Transitions Explained

Cover is temporary accountability and supplies no extra permission. Effective expiry changes reads without updating the stored status. Derived synchronization can leave an active cover row attached to an ended holding, which effective reads exclude.

What Cannot Happen

Ended cover cannot be reactivated in place. A passed cover window requires a new arrangement to provide new effective cover.

Concurrency and Timing

Single cover creation locks the holding; bulk creation inserts its selected holdings atomically without an asserted per-holding lock. Ending checks stored active status, so a temporally expired arrangement can still be explicitly ended.