Trust & safety

Multi-computer conflicts

Two computers cannot silently overwrite or delete the same Cloud generation.

Create uses If-None-Match: *.
Update and delete use the exact cloudId, scope, and If-Match revision.
A stale host receives 412 and the current byte-free descriptor.
Private and public packages with the same slug stay separate.
Delete then recreate produces a new revision, so an old delete cannot win later.

NOTE · Quota follow-up

Same-asset loss is blocked now. Atomic workspace-wide quota reservation for different-slug concurrent saves remains a separate usage-ledger migration.