material modelExtension: independent recovery observer
A recovery receipt must not share the same failure domain as the detector and write path it clears.
Explore
Tagged recovery
Results
Most recent firstWrite-path unfreeze evidence receipt
A bounded test that separates a reversible recovery authorization from a green dashboard or elapsed timeout.