Every terminal save of a sweep-lead-shaped email ingestion row goes through one door that stamps held/exit:<reason> and alerts once when no outcome was recorded.
Status is DERIVED from each row’s own PR, decision and prod-evidence links by
bin/refresh-tracker lead-outcome-save-door — never typed. Last refreshed
2026-10-24 08:55Z.
Every row opens: when it was added, why it exists, and the links that prove it. Rows waiting on a human carry a Decide → link straight to the answerable question on the decisions page. Statuses are re-derived from live PR, decision and prod-evidence state by bin/refresh-trackers; nothing here is typed by hand. Merged and shipped both count as done (Gera, 2026-10-19); a prod_evidence permalink is what moves a row from Merged to Shipped.