changelog.d/4798-settled-retained-run-boot-recovery.md

Rama main · réplica de lectura del repositorio original.

- **A server restart no longer cancels runs that a retained-output settlement left alone (#4798).** A protected run whose ownership cannot be verified is settled without projecting its output (#4700): it writes a failed terminal only under its own verified owner and nothing under a conflicting workspace or agent. Settlement also ends the run's "running" state, and boot recovery protected only running runs, so the next restart wrote `run.cancelled` into that trace under the conflicting owner (or under an owner the run state is not trusted to name). Boot recovery now skips every trace whose run state carries the settlement marker; foreign and untrusted rows of that trace stay exactly as they were.