Resolve first. Mutate second.

Named operator authority. Sealing, drift marking, resealing, and recovery require the configured validator.

Paid 0G Compute and Storage work. Starting a seal or reseal can reserve budget and create durable operation state before a Registry transaction exists.

Recovery is commitment-bound and read-only. Recover an uncertain operation before starting another paid attempt.