tests/gateway/test_telegram_operator_notification_recovery.py::test_safety_hold_acknowledgement_is_append_only_and_idempotent tests/gateway/test_telegram_operator_notification_recovery.py::test_runtime_acknowledges_hold_without_domain_transition tests/gateway/test_telegram_operator_notification_recovery.py::test_acknowledged_hold_does_not_republish_on_successor_startup tests/gateway/test_telegram_operator_notification_recovery.py::test_safety_hold_card_exposes_owner_risk_action_only_when_authorized tests/gateway/test_telegram_operator_notification_recovery.py::test_enabling_owner_risk_republishes_acknowledged_hold_card tests/gateway/test_telegram_operator_notification_recovery.py::test_owner_risk_capability_requires_exact_candidate_owner_and_seal tests/gateway/test_telegram_operator_notification_recovery.py::test_owner_risk_callback_transitions_and_publishes_owner_review tests/gateway/test_telegram_operator_notification_recovery.py::test_owner_approval_preflights_plan_before_committing_review tests/gateway/test_telegram_operator_notification_recovery.py::test_recovery_capability_requires_exact_candidate_owner_and_seal tests/gateway/test_telegram_operator_notification_recovery.py::test_unacknowledged_hold_republishes_once_per_candidate_epoch tests/gateway/test_telegram_operator_notification_recovery.py::test_startup_recovers_hold_when_bootstrap_consent_handoff_is_missing tests/gateway/test_telegram_operator_notification_recovery.py::test_status_recovery_then_same_candidate_restart_is_deduplicated tests/gateway/test_telegram_operator_notification_recovery.py::test_operator_status_recovers_current_card_only_for_exact_owner tests/gateway/test_telegram_operator_notification_recovery.py::test_status_command_uses_deterministic_onboarding_recovery