Hand off active turns at committed steps during deployment

[ReganBell]

Deploy relinquishment now asks admitted turns to yield after a committed tool result, with a bounded 120-second grace. The next worker resumes the durable run without spending a failure retry. Pi continues a clean native tape without another user message or interruption note; Claude, Codex, and OpenCode respect the same cutoff while retaining their existing recovery behavior.

Loop and cron journals preserve completed stages and the original fire identity across worker replacement. Terminal runs keep a durable delivery-pending marker until delivery and failure-transcript backfill are queued, so a lost completion callback is recoverable. Shared dispatch guards prevent new tool work after the deadline. Committed skill loads restore their original file paths only when currently authorized skill and pack contents match the recorded fingerprint.

Unknown tool outcomes still use the existing recovery path. Foreground sandbox process reattachment beyond the grace period is a separate follow-up; uncommitted external effects are not claimed to execute exactly once. Includes additive handoff-count and delivery-pending migrations.

Validation:

• 519 affected tests passed across worker, stores, tape, provider adapters, loops, cron, delivery, tools, and skill recovery; additional fingerprint and orchestrator continuation checks passed.
• Swarm orchestrator, store, and provenance regressions passed after adding handoff signals to the runtime-metadata allowlist; independent security review confirmed request binding remains intact.
• PostgreSQL store/cron tests and a reopen test for handoff and terminal-delivery checkpoints passed.
• Typecheck, lint, CLI build, and deployment contract typecheck passed.
• Real provider QA in a local development instance, exercised through Firefox and Slack: graceful core replacement resumed both Codex and Pi turns; each append executed once and the final reply reported a count of one. Pi resumed seamlessly with no interruption note.
• Independent adversarial reviews covered lifecycle/durability and provider adapters, including the skill-directory integration after merging main. Findings resolved.