pub const ALLOW_MASS_DELETION_ANNOTATION: &str = "kopiur.home-operations.com/allow-mass-deletion";Expand description
Acknowledges a mass-deletion wave on a Repository/ClusterRepository.
Value: an RFC3339 timestamp. A HELD external deletion is released iff its
Snapshot’s metadata.deletionTimestamp <= this value — “I approve what is
pending NOW”. Deliberately VALUED (unlike the presence-only
allow-identity-change ack, consumed at a single admission instant): this
annotation is read continuously by the controller, so a presence-only ack
left behind (or committed to Git) would disarm the breaker forever. With
the timestamp, a stale ack is inert against any LATER wave, nothing ever
needs to remove it, and the operator never edits user metadata. The
controller clamps the effective value to <= its own now (clock-skew guard);
an unparseable value is ignored (Warning event on the repository).