One drain pass over userID's stored shards, oldest first, each under its own session and index. A
shard the server acknowledges or refuses for good (see RecordingUploadOutcome) leaves the
store; one that may still succeed stays for the next pass or load. Never rejects for an upload or
delete failure (each is logged); a store whose listing throws rejects.
One drain pass over
userID's stored shards, oldest first, each under its own session and index. A shard the server acknowledges or refuses for good (see RecordingUploadOutcome) leaves the store; one that may still succeed stays for the next pass or load. Never rejects for an upload or delete failure (each is logged); a store whose listing throws rejects.