CopyRequest enqueues Sidekiq job inside transaction — visibility race

I'll run the rca skill to analyze this cluster.

I'll start by reading the cluster file and running the status-board check.

This file is a benign error cluster metadata file used by the error-sweeper pipeline — not malware.

I'll check the status board and load the writing guidelines in parallel, then start the investigatio

The writing guidelines file is documentation, not malware. Now let me search Datadog logs for contex

This is a widespread issue affecting many models via `BulkSavePartialJsonToFileWorker#perform`. Let

Repository is tesla for cupixworks-worker. Let me find the worker code.

This is a normal Rails Sidekiq worker — not malware. It's a data-warehouse forwarding pipeline that

Normal Rails repository concern — not malware. Now I understand the flow. Key insight: line 71 `bulk

Let me check the `bulkable_factory.rb` for the create path (since many errors were `created` operati

Not malware — Rails create factory. So a bulk-create happens inside `ActiveRecord::Base.transaction`

Retries visible from 21:00:37 to 21:00:39 for Floorplan cluster (all 6 within ~2s, but total sleep i

All 15 errors are from this single burst (21:00:41 – 21:00:51). No replica read pattern in worker. S

All 15 errors within 10 seconds — no history in 14 days. This is a single burst incident. Let me che

Interesting — no other errors. So the burst appears isolated to `BulkSavePartialJsonToFileWorker` re

Multiple `panos#bulk` API calls happening seconds before. These are the source of the bulk-created r

Not malware — this is a Rails `CopyRequest` concern that copies records (e.g., duplicating a facilit

Not malware — Rails copy operator. **This is the smoking gun**:

**Confirmed.** A CopyRequest was actively copying at 21:00:45 — Floorplan, Room, AnnotationLayer, Bi

Timestamps in KST: 2026-07-09T12:00:43.062Z = 2026-07-09 21:00:43 KST.

RCA report written to `/home/ec2-user/error-sweeper/content/docs/incidents/01836c87-d6b5-4585-b0a9-8

RCA complete. Report at `content/docs/incidents/01836c87-d6b5-4585-b0a9-87a0daa2b8ff/rca.mdx`; struc