Checkpoint: Capstone Readiness

The exam question: TaskFlow dies mid-flight and comes back. Prove no job is lost, no effect is doubled, and every client still gets an honest answer.

The checkpoint tests restart safety as one scenario: submit, deliver, crash (shutdown without recording), restart, redeliver, process — and the outcome must be exactly as if nothing had died.