H6 Library cleanup
- Area
- H — Ecosystem glue
- Audience
- both
- Kind
- feature
- Status
- accepted
- Maturity
- planned
- Labels
- storage, verification, wiring
- Relates to
- D5
The feature in the specification · Read at
Requirements
Cleanup candidates MUST be selected from watch and request data, and MUST NOT be selected on age alone.
- locked by
- 0.21.0 open
No media MUST be deleted without first producing a dry-run listing every candidate, the space it reclaims, the rule that selected it, and the evidence behind it.
- locked by
- 0.21.0 open
Deletion MUST require an explicit operator confirmation of the reviewed plan, and a confirmation MUST NOT authorise deletions in later runs.
- locked by
- 0.21.0 open
Every deletion MUST be written to an auditable record naming what was removed, when, the rule, and the justifying evidence.
- locked by
- 0.21.0 open
A removed item MUST remain re-acquirable through the request manager and \arr, so deletion returns it to "wanted" rather than erasing the wish for it.
- locked by
- 0.21.0 open
The tool MUST authenticate to the media server, the request manager, and the \arr apps, and MUST report any it cannot reach.
- locked by
- 0.21.0 open
When watch data cannot be read, the tool MUST refuse to select candidates and MUST NOT fall back to deleting on age.
- locked by
- 0.21.0 open
An item still wanted by any household member MUST NOT be a candidate, and watch state MUST be evaluated across the household, not from a single account.
- locked by
- 0.21.0 open
Children's viewing data MUST stay governed by the parental-controls rules and MUST NOT be surfaced to justify a deletion.
- locked by
- 0.21.0 open
Disk-space pressure MAY change when cleanup is proposed but MUST NOT bypass the dry-run-and-confirm gate.
- locked by
- 0.21.0 open
A confirmed plan MUST be re-validated at apply time, and MUST be re-presented rather than applied if its candidate set has changed.
- locked by
- 0.21.0 open
A media file already removed out-of-band MUST reconcile without error and be reported as already-gone, not as a failed deletion.
- locked by
- 0.21.0 open
A rule matching a series or collection MUST present the full set with per-item evidence and MUST NOT delete the set wholesale on a single member's match.
- locked by
- 0.21.0 open
Candidate reporting, dry-run, and confirmed cleanup MUST each be reachable non-interactively, with confirmation supplied explicitly.
- locked by
- 0.21.0 open
When no candidates match, the tool MUST state that explicitly rather than present an empty confirmation.
- locked by
- 0.21.0 open