Transaction-owned, non-blocking application lock (03 §7 "one sweeper at a time"). rows SweepLockRow (1).
ProtectedCallCancels an in-flight delivery (03 §7, F2): stamps CancelRequestedAt. The lease token is left unchanged.
Sweeper-wide expiry in bounded batches; rows ExpiredDeadLetterRow as ConsumeSqlBuilder.ExpireLeases.
batchSize defaults to EXPIRE_LEASES_BATCH: plan 06's sweeper calls it with no argument.
rows DeadLetterRow, keyset-paged by delivery ID.
rows PartitionRow, keyset-paged by partition key; condition null = every non-Idle key.
ProtectedNewDatabase prerequisite check (03 §6): READ_COMMITTED_SNAPSHOT on SQL Server. rows IsolationRow (1).
ProtectedStatementProtectedTableFor the rare raw statement (test-only helpers); never for a queue write.
Operator, sweeper and topology-validation calls (03 §5.2, §7). Partition conditions are derived from the delivery rows alone inside the procedures (InFlight, Blocked for an Ordered head that is dead-lettered, else Idle); stats are per-status index seeks; cancel-in-flight stamps the flag and leaves the lease token unchanged (F2).