Initial Data Load
What It Models
Initial loading records the controlled import period and its reset attempts. The workspace keeps its latest opening facts, while durable reset jobs retain removal progress.
Identity and Attributes
The load uses workspace identity; every reset has its own durable job identity. The latest opening actor, time and optional bounded reason; repeated entry during loading and activation preserve it. Optional staff explanation retained on the reset job. Validated removal order for the participants classified as emptied. Stored participant position and bounded batch progress. Returned removal counts and inapplicable outcomes for visited participants. Aggregated resource totals exposed by reset inspection. Pending, running, succeeded or failed; recovery submits a new reset. Platform’s declared emptied and retained lists with reasons, plus required remote reset support. Returning lifecycle to active; this has no separate load-completion record.
Relationships
The workspace owns the opening facts on its lifecycle row. The reset invokes classified participant behavior across service boundaries.
Invariants
The structured invariants distinguish service and database enforcement from documented obligations. The listed enforcement points bound what the workflow can rely on.
How It Is Stored and Shared
Platform’s lifecycle service owns this design object. The physical declarations identify its stored records, while shared jobs provide durable execution and inspection.
Open Design Questions
Reset does not enforce the planned check for writes outside import, and activation does not inspect reset outcome. Reopening loading can replace previous opening facts, while application restoration differs by participant.