Milestone/c02 c03 hardening

[SuPuHe]

Summary

Implements and hardens C02/C03 reconciliation recovery:

• fail-closed evidence and submission-reference binding;
• strict recovery-advisor contract;
• executable chaos/failure scenarios and escalation runbook;
• no settlement submission path or credentials.

Validation

pnpm lint: PASS
pnpm typecheck: PASS
pnpm check:generated: PASS
pnpm validate:fixtures: PASS
pnpm test: PASS
pnpm --filter @oneshot/reconciliation verify: PASS (51 tests)

Independent review

Gate A: PASS
Reviewer: free-pi-cli / glm-5.3-flash
Base: c96aa9b
Head: c9cb3f4
Tree: ac8932cccea806e3f2fa0f3705d07279b3d6f89c

Gate B: pending.

Risks and rollback

No external settlement action is introduced. Revert commit c9cb3f4 to roll back.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	oneshot	c9cb3f4	Sep 07 2026, 09:04 PM