CompensateMyAction
Require an exact undo or compensating-action fingerprint before consequential work begins, then track execution and compensation as separate durable states.
Plan reversibility first
A response is safe to execute only while the compensation record is armed and unexpired.
Close the saga
After the primary action, compensation_due stays true until the caller records compensation.
POST /v1/compensations/manage
{"operation":"bind","action_fingerprint":"sha256:...","compensation_fingerprint":"sha256:..."}State, not execution. Your system performs and verifies both actions. ScrubMyText records only their digest-bound lifecycle.