Document Dataflow recovery operations

2026-08-03 06:09:52 +02:00
parent e3e0fdaab5
commit e5f4021de9
2 changed files with 4 additions and 1 deletions
@@ -58,3 +58,6 @@ For provider effects, Ops is the status and evidence-chain projection rather
 than the reconciliation authority. Follow the owning module's bounded action:
 for example, reconcile an unknown Mail SMTP command from provider evidence and
 never retry the original effect merely because its caller state is incomplete.
+For Dataflow, a database-only run is atomic. A published-output run is forward
+recovery: inspect its recorded output digest and sink idempotency key, and do
+not start another publication while its state is `outcome_unknown`.