# Phase 4 Prepared Local Resume Evidence

This slice gives the daemon a local kernel-resume transaction without adding
transport, persistence, authentication, or run-authority policy to the kernel.

| Contract | Executable evidence |
| --- | --- |
| Inert reservation | `Run.PrepareLocalResume` captures the run identity and exact next sequence without a context, I/O, event, goroutine, provider call, tool call, or interaction. |
| Explicit decision | `PreparedLocalResume.Commit`, `Abort`, and `Close` form one synchronized decision. Commit and abort contention has one winner; duplicate and conflicting decisions are deterministic. |
| Cancellation handshake | Run cancellation and engine shutdown latch behind a pending decision. Commit after cancellation and abort after cancellation both release exactly one terminal finalization without post-boundary work. |
| Safe rollback | Aborting a live reservation restores a byte-identical suspended snapshot and preserves the original event boundary. |
| Boundary isolation | Snapshot export, another suspend/resume reservation, and interactions fail while the reservation is pending. No event sequence is consumed until the decision releases execution. |
| Compatibility | `Run.Resume` is a prepare-plus-commit wrapper. Cancellation of an in-flight `Suspend` still auto-resumes a boundary established after that request was cancelled. |

The agent tests cover live commit and abort, cancellation before each decision,
shutdown timeout and drain, exact event sequences, nil and invalid states,
duplicate decisions, and high-contention commit/abort races. Focused shuffled,
race, vet, lint, NilAway, and coverage gates are required before integration.