Instruction file imported from flext-sh/flext-db-oracle (.github/instructions/runtime--atomic-effects.instructions.md). Copyright stays with the author.

Effects publish atomically

Validate the complete change before mutation, stage on the destination filesystem, and expose it through one atomic commit point. Partial success fails.

For mass retirement, hold serialization through postcondition and atomically isolate each root before internal reclamation. The rename is the commit point; sequential unlinks are cleanup, not an atomic batch. Cleanup failure remains red, preserves its manifest, and requires causal correction plus fresh preflight.

Rollback may remove or restore only effects attributable to the current invocation and only from already validated recovery data. Rollback failure is attached to the original exception, which remains the exception re-raised. Never delete unknown, foreign, live, dirty, or ownership-ambiguous state.