Fence generated artifact retention

2026-08-03 03:54:58 +02:00
parent 9da03090a7
commit 50ce8b0acb
5 changed files with 435 additions and 12 deletions
@@ -34,8 +34,9 @@ object-storage contract under opaque Campaign-owned keys. Templates returns a
 bounded artifact or a Files-managed artifact for printable output. Database job
 rows retain the expected hashes and provenance. Workers resolve and verify the
 frozen evidence before delivery. Build failure compensates objects written
-before database commit, and retention keeps database references when object
-deletion fails so cleanup can be retried.
+before database commit. Retention uses a fenced forward-recovery operation and
+independently verifies both artifact absence and the committed locator update;
+partial or unobservable cleanup remains visible in Ops.

 ## Dependencies