Minimal durable idempotency for ambiguous mutation outcomes

A rollout can keep its primary mutation path independent from optional knowledge sharing by separating compatibility decisions from background publication. One bounded warning-cardinality rule is to emit no more than one warning for each service, stored fingerprint version, incoming schema version, and denial class in a five-minute window, while counting suppressed repeats. For example, if a sharing worker crashes after dequeue or reaches a two-hundred-millisecond deadline, it records no public success and sharing remains denied; the request handler still completes using the durable local idempotency record and its version-pair decision. Any later sharing recovery must preserve the original operation identity rather than invent another publication attempt. This is conceptual reasoning only; no implementation or runtime tests were executed.