Wave 4 Pass 4.A residual-risk register CLOSED (canonical tag re-record…

Decision

Wave 4 Pass 4.A residual-risk register CLOSED (canonical tag re-record). H1 Safari iOS IDB 7-day eviction → pilot runbook line item; H2 Server Action ID rotation → non-issue (IDB stores payload only, drain re-imports fresh); H3 no inline-edit on conflict → Pass 4.B FAB scope. Pass 4.A architecture is stable foundation for 4.B/4.C.

Rationale

Reasoning chain: premortem (session dfdee8e0) → 2 hardening fixes (commit 3f6dd0d) → generate_hypotheses + 3 add_evidence (d6767afe / 26380975 / a7ad8e0f). See decision 1e57a990 for full text; this is a tag-canonical re-record.

Alternatives Rejected

Outcome

Pending

Related

• wave-4-pass-4a-residual-risk-register-accepted-3-risks-ident
• wave-4-pass-4a-architecture-canonical-re-record-serwistnext
• r-plan-wave-0-shipped-adr-0003-authz-scope-captured-repo-liv
• r-plan-layer-2-architecture-locked-final-record-with-correct
• referral-credit-note-scs-module-is-go-for-production-within
• adr-0006-cloudflare-r2-for-r-plan-v1-photo-storage-aws-sdk-v