{"id":"monotonicity-and-caution-prevent-state-loss","text":"Monotonic state ratchets (cursors only advance, windows never reopen) and cautious deletion (preconditions before permanent removal, two-phase trash workflows) together ensure that committed state can never be silently lost or regressed — unless wallet creation silently overwrites existing state, demonstrating that creation operations bypass both guards because the codebase protects against destructive deletion and regression but not destructive creation.","truth_value":"IN","source":"","source_url":"","source_hash":"","justifications":[{"type":"SL","antecedents":["state-ratchets-prevent-regression-across-domains","deletion-is-guarded-by-preconditions"],"outlist":["wallet-creation-silently-overwrites"],"label":"Anti-regression ratchets and deletion preconditions cover modification and removal but not creation — silent overwrite on create is an unguarded state-loss vector"}],"dependents":["financial-concurrency-is-comprehensively-safe"],"metadata":{"last_reviewed":"2026-06-06T06:26:57","review_result":"pass"},"created_at":"","updated_at":"","reviewed_at":"","verified_at":"","retracted_at":"","explanation":{"steps":[{"node":"monotonicity-and-caution-prevent-state-loss","truth_value":"IN","reason":"SL justification valid","antecedents":["state-ratchets-prevent-regression-across-domains","deletion-is-guarded-by-preconditions"],"label":"Anti-regression ratchets and deletion preconditions cover modification and removal but not creation — silent overwrite on create is an unguarded state-loss vector","outlist":["wallet-creation-silently-overwrites"]},{"node":"state-ratchets-prevent-regression-across-domains","truth_value":"IN","reason":"SL justification valid","antecedents":["chat-monotonic-read-progress","watermark-finalization-is-irreversible"],"label":"chat read cursors are monotonic (never re-mark as unread), aggregation windows follow OPEN→CLOSED→FINALIZED with no reversal — both are state ratchets that make backwards movement structurally impossible"},{"node":"chat-monotonic-read-progress","truth_value":"IN","reason":"SL justification valid","antecedents":["chat-dual-ordering-sequence-and-lamport","chat-read-cursors-monotonic"],"label":"Sequence-number ordering + monotonic cursors create an irreversible read-progress guarantee"},{"node":"chat-dual-ordering-sequence-and-lamport","truth_value":"IN","reason":"premise"},{"node":"chat-read-cursors-monotonic","truth_value":"IN","reason":"premise"},{"node":"watermark-finalization-is-irreversible","truth_value":"IN","reason":"SL justification valid","antecedents":["watermark-drives-finalization","window-lifecycle-one-directional","no-window-merging-or-retraction"],"label":"Three properties compose into hard irreversibility: watermark-only trigger + one-way lifecycle + no retraction"},{"node":"watermark-drives-finalization","truth_value":"IN","reason":"premise"},{"node":"window-lifecycle-one-directional","truth_value":"IN","reason":"premise"},{"node":"no-window-merging-or-retraction","truth_value":"IN","reason":"premise"},{"node":"deletion-is-guarded-by-preconditions","truth_value":"IN","reason":"SL justification valid","antecedents":["s3-bucket-delete-requires-empty","email-service-two-phase-delete"],"label":"Both systems gate permanent deletion behind a prior state transition, making accidental data loss a two-mistake problem"},{"node":"s3-bucket-delete-requires-empty","truth_value":"IN","reason":"premise"},{"node":"email-service-two-phase-delete","truth_value":"IN","reason":"premise"}]}}