Reversible Decisions Before Destruction

Context

Removal has consequences that record editing cannot undo. The waiting decision and final recheck protect against mistaken selection and changed conditions.

Decision

Require a reasoned staff deletion request, fixed eligibility, reversible preservation actions and a locked recheck before committing irreversible removal.

Alternatives Considered

Immediate deletion by an authorised person: Immediate destruction provides no chance to preserve a mistaken selection. A second approver: The recorded product decision makes the requester the sole approver. Automatic deletion of long-disabled workspaces: Long-disabled reporting supplies candidates without deciding deletion automatically.

Consequences

Preservation and destruction arbitrate through the request row. Lost requester authority holds the request for review. Later settings do not recompute an existing wait; release may extend eligibility.