Fence and reconcile Dataflow runs

src/govoplan_dataflow/backend/manifest.py

@@ -176,6 +176,11 @@ DOCUMENTATION = (
                 "aggregate, sort, limit, output, revisioning, and bounded preview."
             ),
             "sql_safety": "Constrained AST compilation only; no pass-through execution.",
+            "run_recovery": (
+                "Database-only runs commit atomically with Core recovery evidence. "
+                "Output publication uses forward recovery and blocks blind retry "
+                "when provider acknowledgement is uncertain."
+            ),
         },
     ),
 )
@@ -432,10 +437,12 @@ manifest = ModuleManifest(
         maturity="vertical_slice",
         documentation_ref="README.md",
         test_ref="tests/test_golden_flows.py",
-        known_limits=("Execution adapters and operator recovery evidence do not yet cover every declared node family.",),
+        known_limits=(
+            "Execution adapters do not yet cover every declared node family.",
+        ),
         owned_concepts=("dataflow definition", "dataflow revision", "dataflow run", "transformation graph"),
         non_owned_concepts=("datasource binding", "connector transport", "report presentation", "workflow task"),
-        recovery_docs=("README.md",),
+        recovery_docs=("README.md", "docs/DURABLE_RUN_RECOVERY.md"),
         security_docs=("README.md",),
         operations_docs=("README.md",),
     ),