Error Recovery Everywhere, and a Fifth Engine to Keep It Honest

The recovery stack is complete on every runtime — deepest-failure diagnostics, partial trees, and declared resync spans with byte-identical offsets — verified daily by a five-engine differential fuzz that now includes a reference walker with every optimization switched off.