Attempt Administrator Notices After Commit With Bounded Retry

Context

Usage warnings need an audience and delivery bookkeeping independent of request settlement.

Decision

Send threshold email to the recorded interim Administrator audience after crossing commit, using ten-minute claims and at most three attempts while allowing duplicates and missing delivery.

Alternatives Considered

Move to registered Platform notifications: The current implementation uses the earlier shared email helper; migration remains the recorded open question.

Promise exactly one delivered message: Neither stamping before nor after an external send makes delivery and bookkeeping atomic.

Send before the crossing transaction commits: A rolled-back crossing can still have produced a customer email.

Consequences

Notice-start and delivery errors do not undo settlement. No eligible administrators produces zero-recipient completion. This path records no notification delivery history and does not consult notification preferences. A sender that outlasts its lease can overlap another attempt. The recorded responsibility-based audience direction should replace the interim resolver when decided.