simple-publication

Date: 2026-09-12. Status: implemented.

Decision. Use one writer per results directory. Validate the saved candidate and prepare evidence before individually replacing the current table and sidecars. Keep run records, not old Parquet copies. No restart/concurrency state machine: after interruption, audit and rebuild if needed. Audit never downloads or repairs sources.

Reason. Atomic replacement protects the table from validation failures. It is not a transaction across the table and sidecars; their hash agreement must be checked before import.