Recovery receipts

Recovery receipts connect a detected failure to the response: fence, pause, eligibility evaluation, reassignment, replan, resume or terminal failure. They make recovery measurable and replayable.