ObserveShadow computes intended outcome only and refuses FAV_DEGRADED_READ; HandleLease and Register(fav) stay fail-closed. Co-authored-by: Cursor <cursoragent@cursor.com>
Keep durable fav unregistered and fail-closed; CLI only prints status and remaining-port inventory without destructive backfill/recover commands. Co-authored-by: Cursor <cursoragent@cursor.com>