Search Indexing Service · View 15 of 21 · Runtime
Decisions
- Staleness is not one budget. Fields a user catches instantly get seconds; fields nobody notices for a minute get a minute; suppression gets no tolerance at all.
- Suppression is its own lane rather than the fast lane's tail, so a moderation action cannot queue behind a price storm.
- Parent fan-out is a tracked job with progress and an ETA, because a brand rename touching two million listings cannot be an inline side effect of one change.
- Reindex writes take a reserved share of capacity, which is what makes a rebuild a scheduled operation rather than a latency incident.
Assumptions
- Fast lane p95 ≤ 2 s; suppression p99 ≤ 5 s; slow lane p95 ≤ 60 s, p99 ≤ 5 min; fan-out of 2,000,000 children complete within 30 min at p95.
- Degraded mode may widen the slow lane to 30 min, and the response says so.
Risks
- Two lanes writing the same document means a partial update can land on a document the slow lane is about to replace. Version-guarded field-level writes are mandatory, not an optimisation.