recoverOrQuarantine

Production recovery boundary. A retained lease can later overwrite newly acquired inventory, so a failed recovery must stop the player from continuing until the same idempotent recovery succeeds on a later join.