Retention

A Walrus span ends silently; the first symptom is a read that fails. Permafrost owns every span.

What the deployment does

• Records the end at write time.
• Flags an unknown end, never passes it.
• Watches continuously for spans near their end.
• Renews in time, without moving anything a receipt points at.
• Never deletes while renewing. A lapsed span is reported, not quietly repaired.

What you control

• Per bucket: renewal on or off, and the default span. → Placement
• Per file: a longer or shorter span.
• Local files have no span. They stay until you delete or promote them.

The deployment page shows what’s held and until when.