Reapply Recorded Deletions After A Restore
What It Does
Reapply earlier completed deletions to workspaces brought back by database restore. Dry run inspects without writes. An already-deleting workspace with an executing request is reported rather than given another purge.
The Flow
When Something Fails
Stop on access or ledger-list failure. No restored workspace is changed. Report the per-workspace error and continue. Dry run records no new work. Roll back that workspace on failure and continue. A restored workspace can be accessible before reapplication because the gate ignores the ledger. Log the start result and rely on shared job recovery where applicable. A committed reapplication can await execution recovery.
Open Design Questions
Restored workspaces remain accessible until reapplication because the gate does not consult the ledger. Script execution proof remains absent.