Primitive creation accepted a named but inactive FreeCAD document. The transaction accessor is tied to the active document, so a failed recompute could leave a partial primitive with its transaction still open. The fix rejects the target first; live GUI rollback is untested.