Technical Handoff Writer: C4 + Simple English

This is a sample service: a worker that makes photo thumbnails, 44 lines of Python. The agent saw it for the first time. Below is its real report, unedited. The screenshot in the gallery shows part of the document it wrote. --- I wrote the handoff and saved it as `handoff.html` in this folder. I haven't published it or committed it. Both of the skill's checks pass. **Final check output** ``` doc check PASSED — 3 figure(s), 1 table(s), 4 callout(s), 104 sentence(s) exit=0 figure 1 flowchart ok -> /tmp/figs/handoff-1.png figure 2 flowchart ok -> /tmp/figs/handoff-2.png figure 3 sequenceDiagram ok -> /tmp/figs/handoff-3.png 3/3 rendered exit=0 ``` The first run also passed, but with 3 passive-voice warnings, which I rewrote. "Rendered" only means the diagram drew, so I also looked at the images and made two fixes: - **Figure 2:** the text `DELETE_ORIGINAL = True` was cut off in its box. - **Figure 3:** the caption pointed to the wrong step. The PNGs in `/tmp/figs` were only for checking and aren't part of the handoff. **What the handoff tells the team, all taken from the code:** - **It can't be undone:** `DELETE_ORIGINAL = True` deletes each original photo after making thumbnails, and no other copy exists. The handoff gives the steps to follow before changing sizes or the resize code. - **Messages that can never succeed:** the worker deletes the original before it removes the queue message. If it crashes between those two steps, every retry fails because the original is gone. Such messages, and some in `uploads-dead`, must not be put back on the queue. - **One error stops everything:** `handle()` doesn't catch errors, so one corrupt photo stops the whole worker. Nothing in the repo restarts it, and there are no metrics or alerts. The handoff proposes three alerts. - **The 60-second timeout is a guess:** the worker takes 10 messages at a time, and each one comes back after 60 seconds whether or not it's finished. Nobody has measured how long a photo takes, so the handoff says not to run two workers until someone does. **Gaps it flags:** the `storage` and `imaging` modules aren't in this repo, so the worker can't run from it alone. Also, the handoff is based only on the 44 lines of code; nothing here has been run or tested.