There would be no rollback of the deleted marker since we don't want to undo the delete - we want to keep trying until it works. > timeout is a fail? No, a ti

There would be no rollback of the deleted marker since we don't want to undo the delete - we want to keep trying until it works. > timeout is a fail? No, a timeout would just issue a retry until we got a response back (or if there is a reader it would keep connecting until it got through). There is no danger about deleting a file multiple times since any additional unneeded deletes would report such. > this does not mean it was fixed on disk forever Then the system would keep seeing the marker (after it restarted from the crash), repeat the delete call, and then trying to delete the email for good. It can crash 100 times but eventually it would get both removed. > Indexes become exclusive data owner. If you lose indexes... Then no mater how you build this system you're toast and have to restore backups. No system can handle losing indexes (& the error correcting or checksum copies) whether they are btrees, file blocks, or memory addresses.