Cross The Point Of No Return
What It Does
Recheck the locked deletion decision and atomically commit the purge handoff. The first purge submission identity derives from the request. A committed executing request makes an ordinary repeat conclude without another handoff.
The Flow
When Something Fails
Return waiting or ended without destruction. The request remains reversible when checks do not pass. Return a waiting result for outstanding obligations. No purge is submitted. End for a missing workspace or wait for conditions that can clear. The reversible request remains unchanged. Record a hold and its notice for staff review. Removal waits for a new authorized decision. Roll back the transaction on error and use task retry handling. No partial irreversible handoff is committed. Shared recovery can settle an unstarted purge failed. Staff can need to retry removal from an executing-to-failed request.
Open Design Questions
Readiness of external notices and authority is checked before commit; provider delivery and grant changes remain separate systems.