Organization ID (optional, defaults to user's primary organization)

Reason for the status change (required when setting to CANCELLED or FAILED)

When re-queuing, set force_download on print_options

Force-cancel: skip printer stop command and write DB directly (escape hatch for Pulse outages)

Machine-readable error code to persist on the job (used when transitioning to error/failed/cancelled)

Human-readable error description to persist on the job for end-user visibility

Exact retry handoff lease, or explicit null for an unleased claim

Atomically mark the claimed printer ready while re-queuing, fenced by this job's lock ownership

Immutable generation returned by the claim being released

Printer owned by the claim being released

The job is cancelled, but the printer was left alone because it reports a different print

Why the printer stop was skipped