A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is resilience policy.
Repair the resilience policy data migration implementation so it selects safe work under row and risk capacity while explaining skipped candidates.
Evidence
- Affected surface: Cloud-native full-stack / resilience policy.
- Observed failure family: plan migration batches.
- Scope policy: contractVersion must equal 2.