Recovery

Planned: retry, expired drafts, partial failures, rollback, and reconciliation flows are not yet published as a complete Workbench workflow.

Recovery must be driven by Host-observed state and must not silently repeat a side effect.