Distillation

Date: Sep 17, 2026

• 🟡 (09:16) Validation result: openapi_valid=true, with 162 paths and 481 schemas; session.next.prompt.execution_requested, session.next.step.interrupted, session.next.step.recovered, and requestExecution each appeared exactly 4 times.
• 🔴 (09:17) User asserted the recovery/redrive invariant: “never wakes work settled between selection and redrive CAS”.
• 🟡 (09:17) The corresponding it.effect test uses execution ID "recovery-settled-at-cas" and includes a database trigger operation UPDATE session_recovery SET wake_pending = false WHERE execution_id = OLD.execution_id;.
• 🟡 (09:17) An it.effect test is titled “redrives ordinary input without recovering a claim that crashed before promotion”; the shown assertions inspect SessionInputTable and events of type "session.next.step.recovered.1", including recovered phase "ready".
• 🔴 (09:17) User asserted the recovery-boundary invariant: “never recovers a pre-promotion claim when input commits at the recovery boundary”.
• 🟡 (09:17) Recovery tests use SessionRecovery.recover(), SessionInput.admit(...), EventV2.Service, and recovery fixture identity "shared-recovery-identity"; one shown assertion requires SessionInputTable to equal [], and another checks { wake_pending: false }.
• 🔴 (09:17) User asserted the scanner-validation invariant: “never promotes a recovery superseded before scanner validation”.
• 🟡 (09:17) The scanner-validation test inspects a continuation identified by continuation("exact-stale") in SessionInputTable.
• 🔴 (09:17) User asserted the ownership-transfer invariant: “never quarantines an exact recovery conflict after ownership transfer”.
• 🟡 (09:17) The exact-conflict ownership-transfer test uses recovered message ID SessionMessage.ID.make("msg_recovery_exact_owner_stale"), publishes SessionEvent.Step.Started, and expects the SessionRecoveryTable row to match { recovery_error: null }.
• 🔴 (09:17) User asserted the quarantine invariant: “never promotes a quarantined recovery continuation as an ordinary steer”.
• 🟡 (09:17) The quarantined-continuation test runs SessionRecovery.recover() with SessionExecution.Service set to recoveryExecution, then expects SessionInput.promoteSteers(db, events, sessionID, Number.MAX_SAFE_INTEGER) to return exactly 1.
• 🟡 (09:17) Another it.effect recovery test is titled “never recovers an expired cancellation claim”.