Hold, Release Or Cancel A Deletion
What It Does
Pause, release or cancel a deletion before it becomes irreversible. A repeated command with the previous reviewed version is refused instead of applying twice.
The Flow
When Something Fails
Refuse invalid or unauthorized input. The decision is unchanged. Return execution, version or action-state refusal. The competing decision retains its committed result. Roll back the action transaction on error. No partial action is committed. Roll back with the action if notice persistence fails. Action and obligations are retained together. Apply notice retry policy for admitted sends. A cancellation makes the watcher conclude before sending its cancelled notice.
Open Design Questions
Role distribution remains Security’s responsibility. The cancelled notice is stored but the watcher exits before sending it, leaving no ordinary delivery pass.