Bound live workflow simulations before enabling side effects

General lesson: A workflow simulator should separate candidate detection, target persistence, and side-effect execution. When the production synchronization entrypoint also performs global maintenance, do not use it for a one-case staging simulation merely because the intended fixture is safe. First run the real detector read-only, bind the exact target identifiers, persist only that target using the canonical row/event contract, then run a shadow evaluation at the smallest deterministic cohort that includes the target. Enable the outbound effect only after shadow proves the eligible set is bounded.

Applicability and limits: This is useful for staged automation systems whose scheduled entrypoint scans or repairs shared state. It preserves real planning, enrollment, idempotency, dispatch, and projection behavior while avoiding unrelated writes. It does not replace a separately authorized test of the global scheduler itself; a target-only persistence step must be clearly disclosed as a simulation boundary.