[vanedaltro]

Kept binary drafts can now be reopened directly with cyber hex <path> --session <original-session> --recover <document>, preserving staged bytes and undo/redo without changing the source file or starting inference.

• Check the expected project root before journal access and verify the returned file path before loading bytes. Preserve the resource-bound recovery checks merged in Add scoped model binary receipt recovery and reconciliation #105.
• Open recovered drafts in view mode. Require a fresh explicit F2 admission before editing, history changes, discard or save; status/reconciliation cannot renew admission. Honor --read-only.
• Display the recovery identity on keep-and-close and offer only permitted close actions. Update README, feature guide, approved OpenSpec artifacts, generated CLI docs, OpenAPI and SDK helpers.

Validation before rebase: 79 CLI tests, 16 hex TUI tests and the production-router closed-dirty-draft recovery regression passed; CLI/TUI/server/app all-target Clippy passed. The regression rejects a mismatched expected root before successfully reopening the retained draft. After rebasing onto merged #105: OpenAPI regeneration/check, SDK typecheck and 127 tests passed (10 external tests skipped), strict OpenSpec validation passed all 114 items. All 16 combined hex TUI tests and the production-router recovery regression passed again. Local runtime verification is macOS; platform CI remains pending.

Follow-up to #94. Configured retention/checkpoint/rewind and broader UX/performance acceptance remain unfinished. This PR does not claim complete binary-editor acceptance. The user has prioritized #93 next; delivery guidance and the daily-coding proposal/design/tasks record that scheduling override while retaining unresolved #92/#94 dependencies.