Parent and dependency

Child of #75 (AW-03) and #72. Builds on the merged worker connection/session and daemon adapter slices #109/#110 and the durable exact-replay support already present in the control-plane exchange transaction.

Outcome

Add bounded, replay-safe recovery for one ambiguous authenticated worker exchange. The worker session must resend the exact already-built AW-02 batch under the same operation ownership, so transient HTTP failure can be reconciled without inventing a new heartbeat, claim, terminal, sequence, acknowledgement, or external effect.

This is the prerequisite for the real timer-poll cadence and foreground composition; it does not enable either one.

Required behavior

• Retain a deep-owned exact pending batch only for the duration of the current in-process operation and retry only sanitized transport errors explicitly classified retryable.
• Every retry sends byte-equivalent protocol content with identical message ID, worker/platform sequences, acknowledgement, binding, attempt/fence, and evidence.
• Validate the first observed response against the pre-effect conformance snapshot, then advance local machine state exactly once.
• Use locally bounded exponential full jitter beneath the existing total operation timeout. Ignore remote Retry-After; do not busy-loop or catch up after sleep.
• Caller cancellation stops scheduling new retries. If a transport dependency ignores cancellation, retain the single operation owner until it returns; no replacement exchange may overtake it.
• Unauthorized remains fenced. Protocol/conflict/divergent replay is terminal. Exhausted or timed-out reconciliation remains explicit reconciliation_required and never becomes success/offline.
• Clear retained protocol payloads on completion/failure where Go permits and expose no bearer, endpoint, payload, or raw network error through snapshots/formatting.

Acceptance

• Deterministic tests prove lost-response-then-exact-replay for heartbeat, lease claim, cancel acknowledgement, and terminal; no action is rebuilt between attempts.
• Tests prove divergent replay response, stale generation, unauthorized, non-retryable protocol/conflict, exhaustion, caller cancellation, and cancellation-ignoring dependency behavior fail closed.
• Tests use injected waits/entropy and channel synchronization, with no correctness sleeps.
• Focused uncached, race, repeated/shuffled package tests, vet, full repository validation, independent review, and exact-head CI pass.

Non-goals and authorization

No production route, foreground activation, daemon/process/OCI launch, reconnect/bootstrap, new connection generation, provider call, credential mutation, model download, cloud deployment, or destructive operation is authorized. A later AW-03 child owns timer cadence, sleep/wake/offline observations, cost evidence, and reviewed foreground wiring.