Recovery identity

Status: review needed; local implementation and verification complete. Owner: Codex RI-06.

Persisted run descriptors, scoped projections, conflict-aware booking and an explicit durable local transition extend the accepted receipt custody guard. See spec, plan, tasks, baseline matrix and migration runbook. No retained deployment or managed UI rollout has been performed.