v4.1.0 - Data Durability & Recovery

P0. 'Data is never lost', with zero operator intervention. Three criticals (audio re-submission destroying GM work, worker loss stranding sessions forever, the bot deleting recordings it said were saved), eleven enumerated stuck states, artifact versioning, concurrency tokens, retention safety, and off-host backups. Prerequisite for hosting anyone else's campaign. See section 4.3.

No due date
100% Completed