Adds a production-wired exhaustion trigger hook, documents the no-throw invariant behind the fire-and-forget verification probe, and covers the confirmed-offline reconnect and debounce-driven recovery.