Add durable external-effect runtime identity

tests/test_recovery_runtime.py

@@ -115,6 +115,29 @@ def test_same_fence_cannot_start_duplicate_running_operation() -> None:
         engine.dispose()
 
 
+def test_verified_provider_rejection_is_terminal_without_recovery() -> None:
+    engine, factory = _fixture()
+    try:
+        started = _start(factory, _identity("worker-1", "incarnation-1"))
+        assert started.operation is not None
+        started.operation.reject(
+            summary="Provider definitively rejected the request",
+            evidence={
+                "verified": True,
+                "provider_outcome": "rejected",
+                "checks": {"provider_response": "definitive-rejection"},
+            },
+        )
+        with factory() as session:
+            operation = session.get(RecoveryOperation, started.operation_id)
+            assert operation is not None
+            assert operation.status == RecoveryStatus.REJECTED.value
+            assert operation.completed_at is not None
+            assert verify_recovery_evidence_chain(session, operation.id)
+    finally:
+        engine.dispose()
+
+
 def test_other_runtime_cannot_use_an_active_fence() -> None:
     engine, factory = _fixture()
     try: