The cold-reading ingest verb's orphan sweep deletes committed ledger records without holding capture's ledger lock. The stage lock serialises ingest against ingest only, so a concurrent capture disposition or promote in the same checkout can be reading a reading record while the sweep unlinks it.

The cold-reading ingest verb's orphan sweep deletes committed ledger records without holding capture's ledger lock. The stage lock serialises ingest against ingest only, so a concurrent capture disposition or promote in the same checkout can be reading a reading record while the sweep unlinks it.

Grounds

• pursued: the two locks are always acquired stage-then-ledger so no cycle exists, and a concurrent ledger verb waits rather than reading a record as it disappears; a deadlock or an unlocked unlink would show this wrong