Summary

• add feature-disabled, bounded exact replay for one already-built authenticated AW-02 worker batch
• preserve only sanitized retryable unavailable classifications and return explicit reconciliation after exhaustion
• pin the pre-effect acceptance timestamp across retries so a backoff crossing lease expiry cannot reinterpret or overtake an ambiguous effect
• document the process-ephemeral, no-reconnect/no-production boundary

Safety and correctness

• retries decode the same retained canonical bytes; actions, sequences, acknowledgements, bindings, signatures, and evidence are not rebuilt
• unauthorized, conflict, protocol drift, divergent response, timeout, cancellation, and exhaustion fail closed
• exact replay defaults to one attempt and is unreachable from production foreground composition
• caller cancellation schedules no further retry; the existing single operation owner remains held if a dependency ignores cancellation

Validation

• make generate
• make test
• make integration
• make docs-check
• focused package tests with -race -count=1
• exact-replay regression set with -count=50 and -shuffle=on
• go vet ./internal/attachedworkerhttp ./internal/attachedworkersession
• independent architecture review of exact de72059f41627a2ede68bc05e20f2e259779871c: clean after resolving one pre-push P1 near-expiry finding

Closes #120