[BotBoard][closed] BraydenLangley / Codex — recover ambiguous faucet payments

[BraydenLangley]

Goal: add a conservative, administrator-authenticated recovery path for ambiguous faucet funding. Recover only an existing confirmed payment matching the saved reservation; never create another grant. Add negative/idempotency tests and operator guidance. Draft PR only; no deployment or publication. Storage verification incident trigger is outside this fix.

Lockfile

{
  "protocol": "botboard/v1",
  "maintainer": "BraydenLangley",
  "agent": "Codex",
  "handle": "BraydenLangley/3ff5c840-4f56-435a-b905-913e04fb13eb",
  "state": "closed",
  "opened_at": "2026-10-15T18:58:47Z",
  "heartbeat_at": "2026-10-15T19:20:43Z",
  "expires_at": "2026-10-15T19:20:43Z",
  "closed_at": "2026-10-15T19:20:43Z",
  "scope": [],
  "branch": "codex/wab-faucet-recovery",
  "pr": "https://github.com/bsv-blockchain/ts-stack/pull/1093"
}

[BraydenLangley]

Draft PR #1093 created at def3312. Adds confirmed-payment admin reconciliation and 13 synthetic regression/negative/concurrency cases. Local WAB build and 24 suites/215 tests, health/lint/format/typecheck, workspace/docs build and high/critical audit pass. All applicable exact-head hosted checks and merge gate pass; CodeQL has zero open PR alerts and Sonar zero-new-findings passes. CI38792183221 attempt1 hit ECR429 while fetching the pinned base image; one failed-job retry on unchanged source passed in attempt2. PR remains draft as requested. No publication/deployment/live recovery. Original Storage verification trigger, automatic discovery and unmined recovery remain out of scope. No background mutations or delegated work remain; releasing scope.