Use only the original bound native foreman and selected existing owner. A standalone, worker, observer or unrelated native context reports the missing binding and finishes here. Do not create a binding or manufacture environment or identity evidence. The command verifies the original native binding independently while an unreadable owner prevents ordinary role selection.

Read Installed Skill Lookup before the command block, and read Contradictory Context Evidence for the request and immutable-evidence contract:

skills/herdr-foreman/references/bootstrap.md
skills/herdr-foreman/state-schema.md

Require existing explicit operator authorization for this recovery. Preserve the original dispatch and row, task authority, holds and unknown deliveries. Generate the request through the owner using the actual original assignment index, dispatch receipt and existing authorization. The command derives and validates the row digest and writes a private immutable request; it prints no ledger history. Its parent output directory must already exist. Preserve its returned request path.

HS=.tessl/plugins/jbaruch/herdr-policy/skills/herdr-foreman/; [ -d "$HS" ] || HS="$HOME/$HS"; [ -d "$HS" ] || case "$(git config --get remote.origin.url)" in git@github.com:jbaruch/herdr-policy|git@github.com:jbaruch/herdr-policy.git|https://github.com/jbaruch/herdr-policy|https://github.com/jbaruch/herdr-policy.git|ssh://git@github.com/jbaruch/herdr-policy|ssh://git@github.com/jbaruch/herdr-policy.git) HS=skills/herdr-foreman/ ;; *) echo "herdr-policy skill not found: install jbaruch/herdr-policy" >&2; exit 1 ;; esac
bash "$HS/foreman.sh" prepare-context-quarantine --state <existing-owner.json> --assignment-index <index> --dispatch <dispatch-id> --id <repair-id> --authorization-source <source> --authorization-quote <quote> --output <request.json>

On nonzero, preserve the original owner and evidence, report its diagnostic and finish here. On success, validate the returned request without owner writes:

HS=.tessl/plugins/jbaruch/herdr-policy/skills/herdr-foreman/; [ -d "$HS" ] || HS="$HOME/$HS"; [ -d "$HS" ] || case "$(git config --get remote.origin.url)" in git@github.com:jbaruch/herdr-policy|git@github.com:jbaruch/herdr-policy.git|https://github.com/jbaruch/herdr-policy|https://github.com/jbaruch/herdr-policy.git|ssh://git@github.com/jbaruch/herdr-policy|ssh://git@github.com/jbaruch/herdr-policy.git) HS=skills/herdr-foreman/ ;; *) echo "herdr-policy skill not found: install jbaruch/herdr-policy" >&2; exit 1 ;; esac
bash "$HS/foreman.sh" quarantine-context-evidence --state <existing-owner.json> --record <request.json> --dry-run

On nonzero, preserve the owner and evidence, report the actionable diagnostic and finish here. On success, read the proposal or retained replay result and perform the already-authorized action with the same owner and request:

HS=.tessl/plugins/jbaruch/herdr-policy/skills/herdr-foreman/; [ -d "$HS" ] || HS="$HOME/$HS"; [ -d "$HS" ] || case "$(git config --get remote.origin.url)" in git@github.com:jbaruch/herdr-policy|git@github.com:jbaruch/herdr-policy.git|https://github.com/jbaruch/herdr-policy|https://github.com/jbaruch/herdr-policy.git|ssh://git@github.com/jbaruch/herdr-policy|ssh://git@github.com/jbaruch/herdr-policy.git) HS=skills/herdr-foreman/ ;; *) echo "herdr-policy skill not found: install jbaruch/herdr-policy" >&2; exit 1 ;; esac
bash "$HS/foreman.sh" quarantine-context-evidence --state <existing-owner.json> --record <request.json>

Success returns the same evidence locators on initial completion and replay. Retain those locators without opening the full-ledger backup. The owner verifies its preserved evidence; no task dispatch or clear is authorized. On nonzero, preserve the original files and report the diagnostic; finish here. After success, rerun Step 1's role lookup on the same selected owner and follow its verified continuation. A failed role lookup retains recovery obligations.