The primary customer is the service owner, not the caller. Callers consume a protocol; the owner decides whether their resource is fenced, and that decision is the one that makes the service safe or not.
Replica sets and entity workers want the same primitive with opposite shapes: tens of keys held for hours against hundreds of thousands held for seconds. That tension is resolved structurally on view 09.
The on-call SRE is an actor with a journey of their own. A lock service that cannot be inspected and safely unstuck at 3 a.m. gets bypassed by the second incident.
Assumptions
Security reviews force-release records quarterly and the advisory-lock register at the same cadence.
Service owners are engineers who can change their store's write path. Where they cannot, the advisory waiver on view 04 applies.
Deliberately absent
End customers of the guarded services. They never see a lock, only its absence when a duplicate posting happens.
