Distillation

Date: Sep 17, 2026

• 🔴 [required-recovery-invariant] (01:38) User specified the recovery-redrive invariant: “never wakes work settled between selection and redrive CAS”.
• 🔴 [required-recovery-invariant] (01:38) User specified the recovery-boundary invariant: “never recovers a pre-promotion claim when input commits at the recovery boundary”.
• 🔴 [required-recovery-invariant] (01:38) User specified the scanner-validation invariant: “never promotes a recovery superseded before scanner validation”.
• 🔴 [required-recovery-invariant] (01:38) User specified the ownership-transfer invariant: “never quarantines an exact recovery conflict after ownership transfer”.
• 🔴 [required-recovery-invariant] (01:38) User specified the quarantine invariant: “never promotes a quarantined recovery continuation as an ordinary steer”.
• 🟡 (01:38) Recovery scanner tests exercise batches sized via SessionRecovery.BATCH_SIZE; one assertion is expect(firstWakes).toHaveLength(SessionRecovery.BATCH_SIZE * 2).
• 🟡 (01:38) Recovery scanner restart coverage asserts expect(restartedWakes).toContain(recoverySessions[0]).
• 🟡 (01:38) Recovery fixtures include an execution identified as "malformed-recovery-row".
• 🟡 (01:38) A recovery-boundary test records wake requests with wake: (id) => Effect.sync(() => wakes.push(id)).pipe(Effect.asVoid) and verifies queued input with expect(yield* SessionInput.hasPending(db, sessionID, "queue")).toBe(true).
• 🟡 (01:38) Recovery identity testing uses SessionV2.ID.make("ses_recovery_identity_other") and publishes SessionEvent.Step.Recovered.
• 🟡 (01:38) Test database setup includes an AFTER UPDATE ON session_input trigger.
• 🟡 (01:38) Recovery test fixtures configure the global project with Project.ID.global, worktree AbsolutePath.make("/project"), and sandboxes: [].