feat: govern shared campaign artifact storage

2026-08-01 17:48:24 +02:00
parent 82ddc0c34c
commit cec3d17bff
15 changed files with 518 additions and 159 deletions
@@ -23,6 +23,13 @@ primitives, CSRF/API helpers, shell layout, and route rendering. Tenancy is an
 optional platform module for tenant administration and tenant resolver behavior.
 Files and mail own their respective storage and transport capabilities.

+Generated EML is durable execution material, not a node-local runtime cache.
+Campaign stores it through Core's shared object-storage contract under opaque
+Campaign-owned keys; database job rows retain the expected size, digest, and
+Message-ID. Workers resolve and verify the object before delivery. Build
+failure compensates objects written before database commit, and retention keeps
+the database reference when object deletion fails so cleanup can be retried.
+
 ## Dependencies

 The module has one required runtime dependency: