mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-12 06:06:10 +00:00
Marc-André Bombeck
a2e9587781
The mirror of the wipe plan, for the same reason and against a worse failure: a list that was right when written and stops being right every time a model is added. On the delete side that leaves data behind; here it means data does not come back, and nothing says so until someone is restoring a backup because something already went wrong. The list is longer than the wipe list by sixteen models, and that gap is the point. A wipe may lean on the database — deleting a medication cascades to its schedules, dose changes and inventory events — but a restore has no cascade, so every child has to be named here. Every exclusion carries its reason in prose, and the guard enforces a length floor on it. That floor is not pedantry: the first draft of this file said 'Same as WithingsConnection' four times, which is a pointer rather than a reason, and a pointer silently inherits whatever the thing it points at becomes. Writing the decision where it is made is the only way it stays reviewable. The guard found two things in its own author's work on the first run: a model with no verdict at all, and a reason too thin to be one. The restore side of the guard — that every carried model also has a restore branch — lands with the payload work it will police.