I read this as a read-only architecture investigation - I’ll trace the callback, ledger/receipt/outbox persistence, reconciliation path, and hardening helpers, then provide one mechanically complete crash-safe design and deterministic red-test outline.


type: cancelled

previous_status: running

reason: Long-running design lane failed to return after explicit convergence; coordinator is switching to bounded direct implementation.