Business Adjacent · Flight Log · FL-008
·reviewtube·locked
Webhooks lag; read paths must reconcile
Signal
Stream finished encoding while the database still said transcoding — UI polled forever.
Wrong turn
Trust webhook delivery as the only state machine.
Correction
Self-heal on single-asset GET and board list (capped); cold rewarm on open; re-kick copy when master exists without a stream id.
Distributed systems lose events. Product UI is not allowed to freeze because of that fact.
The durable master lives in object storage. Playback is a derived proxy. When the proxy is ready and the row is not, the next authenticated read repairs the row. The board heals a small batch on each load so operators do not have to open every stuck card.
This is recovery architecture, not perfection — the long-term bar is boring webhook reliability plus the same heal as belt-and-suspenders.