A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is outbox worker.
Repair the outbox worker data migration implementation so it selects safe work under row and risk capacity while explaining skipped candidates.
Evidence
- Affected surface: Full-stack backend focus / outbox worker.
- Observed failure family: plan migration batches.
- Scope policy: region must equal eu-west.