Repository navigation
M5-02: Implement explicit Live/Fixture recovery and provenance discipline #51
Description
Type: App/UI Safety Feature
Priority: P0 / trust boundary
Initial status: Blocked
Owner: App/UI
Depends on: M5-01
Blocks: M5-03, final demo
Writable: mode/recovery UI, API policy tests, provenance docs
唯一目标
Live 失败保持可见，用户可主动切 Fixture 恢复；系统任何位置都不能把 Fixture 冒充 Live。
验收
[ ] Live failure retained
[ ] no automatic/silent fallback
[ ] explicit user click required
[ ] header/report/raw/export provenance 一致
[ ] mode change creates new runId
[ ] old Live result 不与 Fixture report 混合
[ ] screenshots/video 可识别来源
[ ] recovery 在演示中 <= 15 seconds
验证
pnpm test:e2e --grep 'provenance|fallback|recovery'
pnpm test:integration
pnpm checkCodex 指令
实现显式 recovery state，不改 Decision。制造 Live failure 后验证页面、report、raw、
credential/export 全部保持同一 provenance；禁止 silent fallback。
Activity
M5-02: add explicit Live-to-Fixture recovery (#99)