Recover A Stalled Deletion
What It Does
Replace stopped deletion machinery under staff authority. Open watcher checks and conditional purge repointing restrict recovery. Separate job creation can still leave losing records under concurrency.
The Flow
When Something Fails
Refuse missing staff authority. No recovery job is intentionally started. Return errors; shared recovery handles unstarted committed jobs. Separate commits can leave an unreferenced watcher. Refuse missing staff authority. No new removal work starts. Refuse a changed request or missing workspace; recover failed starts through jobs. A losing concurrent retry can leave a job created before repointing failed.
Open Design Questions
Recovery commands lack reviewed version and reason, and their multi-commit job creation needs a concurrency policy.