[vanedaltro]

Owner binary views now have durable private draft operations: status/preparation, atomic expected-byte patches, undo/redo/discard, paged byte review, receipt lookup, discovery and explicit recovery. Every request refreshes Session/Location/read authority; mutations retain prepared edit authority, native/workspace/path ownership and actual-worker lifetime. Read-only launches reach immutable server admission, and Session deletion refuses dirty or unresolved retained work.

The SDK preserves exact offsets and original mutation revisions, rejects superseded page responses and requires explicit recovery after binary POST transport failure. Binary responses bypass generic HTTP response caching. Native hardening retains parent pins, checks replacement bytes before intent, refuses stale reads after uncertain journal publication and never allocates missing recovery IDs. README, roadmap, feature guide, OpenAPI and SDK sources reflect the delivered scope.

Validation:

• 58 binary core tests, 23 production file-route tests, 3 worker/deletion tests, 5 tool admission/workspace tests and 9 hex TUI tests passed locally. The final existing-only recovery change also passed its production recovery regression.
• SDK typecheck and 124 unit/mock tests passed; 10 external tests were skipped in that selection. Five affected Rust crates passed library/test Clippy; formatting, generated sources, diff checks and all 114 strict OpenSpec items passed.
• Linux/Windows platform checks and repository-wide CI remain required at this head. The native child helper is invoked by its parent regression despite its ordinary ignored marker.

Production save/restore, shared snapshot/FileChanged integration, the model binary tool, terminal editing and remaining acceptance continue under #94. Source installation is not exposed by this increment.

Refs #94.