L07-02 — Persist encrypted local job lifecycle #56

Outcome

Implement atomic create/update, schema migration, close/reopen, and recovery for local job records.

Parent and boundary

Parent: #8. Owner: proposed Job module. This issue owns one bounded slice of Job Spine; consume accepted upstream contracts and keep PDF/verdict/publication authority with Core.

Acceptance

• Crash/restart preserves committed transitions and rejects corrupt or incompatible records explicitly.
• Failure case: Partial writes cannot yield a valid-looking job or silently drop provenance.

Required proof

Persistence fault injection and migration golden fixtures. Record the exact source SHA, test command or hosted run, fixture/artifact identity, and any skipped or unavailable lane. Run the repository's mapped proof and check-change gate for a PR.

Handoff

Record changed files, observed result, remaining risk, and a 1–3 sentence anti-slop review. Completion means acceptance evidence, not merely a merged implementation.

Sources

Approved master roadmap.