Complete autonomous recovery controls

internal/store/store_test.go

@@ -159,6 +159,38 @@ func TestNeedsAttentionRetainsFencedLeaseForLateCompletion(t *testing.T) {
 	}
 }
 
+func TestReclaimPersistsAttemptAndBackoffAcrossReopen(t *testing.T) {
+	dir := t.TempDir()
+	s, err := Open(dir)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := s.Append(domain.Event{ID: "create", Type: "TaskCreated", TaskID: "t", Version: 1, Payload: []byte(`{"source":"s","external_id":"retry","project":"p"}`), Surface: string(authz.System)}); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := s.Lease("t", "worker", time.Hour); err != nil {
+		t.Fatal(err)
+	}
+	task, _ := s.Task("t")
+	at := time.Date(2026, 7, 30, 12, 0, 0, 0, time.UTC)
+	p, _ := json.Marshal(map[string]any{"reason": "lease_expired", "failure_class": "worker_lost", "harness_id": task.Lease.HarnessID, "lease_epoch": task.Lease.Epoch, "expected_version": task.Version})
+	if err := s.Append(domain.Event{ID: "reclaim", Type: "TaskReleased", TaskID: "t", Version: task.Version + 1, At: at, Payload: p, Surface: string(authz.System)}); err != nil {
+		t.Fatal(err)
+	}
+	got, _ := s.Task("t")
+	if got.Attempt != 1 || got.FailureClass != "worker_lost" || !got.NextRetryAt.Equal(at.Add(time.Minute)) {
+		t.Fatalf("reclaim projection=%+v", got)
+	}
+	reopened, err := Open(dir)
+	if err != nil {
+		t.Fatal(err)
+	}
+	got, _ = reopened.Task("t")
+	if got.Attempt != 1 || !got.NextRetryAt.Equal(at.Add(time.Minute)) {
+		t.Fatalf("reopen lost retry state: %+v", got)
+	}
+}
+
 func TestOpenRebuildsOnlyFromLogAndIgnoresCorruptSnapshot(t *testing.T) {
 	dir := t.TempDir()
 	s, err := Open(dir)