Red-first: pinAcceptance refuses to write over a standing removal (codex HIGH — a mid-window removal let the retry un-remove without a restore commit); skip-path catch-up stamp closes the stranded-pending hole (silent-failure H1 — PDS write + one stamp failure had no reconciler pre-task-5); reject-stale returns deferred (a rejection that didn't land is not a rejection); jittered swap backoff; ApplyWrites results guard; name-before-5xx mapping order; local record validation before validate:false sends; commitPair race + order pins (killed the surviving swapCommit mutation); Repin/DID-mismatch/value-undecided coverage; mapper sentinels (409 Conflict, 502 UpstreamFailure); doc-accuracy pass (bridge-trust gate, no-lease rationale, uncalled- until-task-5 markers). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>