Distillation

Date: Sep 17, 2026

• 🔴 (09:26) User specified that recovery superseded before scanner validation must never be promoted.
• 🔴 (09:26) User specified that an exact recovery conflict must never be quarantined after ownership transfer.
• 🔴 (09:26) User specified that a quarantined recovery continuation must never be promoted as an ordinary steer.
• 🔴 (09:26) User specified that an expired cancellation claim must never be recovered.
• 🔴 (09:26) User specified that cancellation must never be quarantined after recovery ownership expires.
• 🟡 (09:27) packages/core/test/session-projector.test.ts has 5 Schema.decodeUnknownSync(SessionMessage.Message) matches: lines 126 and 300 decode { ...message.data, id: message.id, type: message.type }; lines 3264, 3405, and 3464 decode { ...row.data, id: row.id, type: row.type }.
• 🟡 (09:27) packages/core/test/session-prompt.test.ts lines 380-405 verify recovery of a lost advisory wake: prompt text "Recover a lost advisory wake" leaves wake_pending: true and promoted_seq: null; wakeCalls initially equals [sessionID]; replay preserves the pending state; recover() invokes another wake for sessionID.
• 🟡 (09:27) packages/core/test/session-prompt.test.ts lines 408-437 test "replays historical prompt admission without execution intent as admit-only": replaying SessionEvent.PromptAdmitted version 1 with prompt "Historical admit-only prompt" and delivery: "steer" produces wake_pending: false, promoted_seq: null, and no wake after recover().
• 🟡 (09:27) packages/core/test/session-prompt.test.ts lines 440-486 test "turns an admit-only exact retry into durable execution intent": two concurrent exact resume: true retries change wake_pending from false to true, produce wakeCalls = [sessionID, sessionID], and record exactly 1 SessionEvent.PromptExecutionRequested version 1 event; repeated projection replay preserves wake_pending: true, and recover() wakes the session once.
• 🟡 (09:27) packages/core/test/session-prompt.test.ts lines 489-511 test "rejects reuse of one ID with a different prompt": reusing messageID for "Delete the failing tests" after "Fix the failing tests" yields Session.PromptConflictError, leaves session.messages({ sessionID }) at length 0, and keeps admittedCount at 1.
• 🟡 (09:27) packages/core/test/session-prompt.test.ts lines 514-553 test "never arms durable wake for a conflicting execution retry": retrying "Original prompt" as "Conflicting prompt" with resume: true yields Session.PromptConflictError; wake_pending remains false; SessionEvent.PromptExecutionRequested count remains 0 before and after projection replay; wakeCalls remains empty before and after recover().
• 🟡 (09:27) packages/core/test/session-prompt.test.ts lines 556-578 test "rejects reuse of one ID with a different delivery mode": changing an otherwise identical prompt from the original/default delivery to delivery: "queue" yields Session.PromptConflictError.
• 🟡 (09:27) packages/core/test/session-prompt.test.ts lines 581-598 test "returns one recorded message to concurrent exact retries": two unbounded concurrent session.prompt(input) calls return equal messages, expose no projected session messages, keep admittedCount at 1, and record exactly 1 SessionEvent.PromptAdmitted version 1 event.
• 🟡 (09:27) Search results in packages/core/test/session-prompt.test.ts show session.resume(sessionID) at lines 153 and 266; admit-only behavior at lines 408 and 440; and "starts execution when resume is explicitly true" at line 775 using prompt text "Run explicitly" at line 784.