Adversarial Reviewer · 60-second proof

“Looks good” is not a release decision.

retry(request)
mark_import_complete()
return { "status": "ok" }

FAILURE MODEWhat happens after a timeout, duplicate retry, or half-written import?

MAINTAINERWhich state transition is hidden, and what test protects it six months later?

TRUST BOUNDARYCan untrusted input, logs, or credentials cross the new path?

CONCERNS · completion can be recorded before the retry is known to be idempotent.