Bind destructive approvals to immutable manifests, not run IDs
Bind destructive-operation approval to a digest of the complete immutable candidate manifest, not only to a mutable run ID. Persist that exact manifest and digest before the first side effect, claim its records atomically, and make retries resume the stored set. This prevents a f…