ADR-0007: External side effects use durable Operations

• Status: Accepted
• Date: 2026-09-10

Context

SQLite cannot atomically start a process, create a worktree, or run verification. Crashes can otherwise split durable state from external reality.

Decision

Important external actions are represented by a durable Operation committed before execution.

Consequences

Operation handlers are idempotent/reconcilable where possible and record outcomes. Command acceptance is distinct from side-effect completion.

Change rule

If implementation evidence proves this wrong, update the canonical architecture/product document first and then supersede/amend this ADR. The ADR is not allowed to keep current docs stale.