fix(notifications): preserve action state and accessible recovery

docs/redesign/phase-7/p7-07/UI.md

@@ -1,6 +1,6 @@
 # P7-07 — Documents interface
 
-**Status: implemented-scope CONDITIONAL GO locally; latest affected frontend and native 13/13 pass, all 18 final images are reviewed and final hygiene passes. Commit and normal push follow.** This is the second boundary in the [approved handoff](../../phase-6/p6-05/PHASE7_HANDOFF.md#migration-order-and-commit-boundaries), following the [metadata contract](CONTRACT.md). It reuses existing resource owners and the Phase 4–6 design system.
+**Status: implemented-scope CONDITIONAL GO; affected frontend and native 13/13 pass, all 18 final images are reviewed, hygiene passes and Documents publication is verified.** Separate P7-08 presentation work remains uncommitted; no clean-checkout or full-phase acceptance is implied. This is the second boundary in the [approved handoff](../../phase-6/p6-05/PHASE7_HANDOFF.md#migration-order-and-commit-boundaries), following the [metadata contract](CONTRACT.md). It reuses existing resource owners and the Phase 4–6 design system.
 
 ## Entry and bounded scope
 
@@ -8,7 +8,7 @@ The metadata contract was committed and normally pushed as `8e4db121ae0ec3f1637c
 
 On **2026-10-16**, a fresh fetch confirmed development HEAD/origin still `8e4db12`, with only the untracked null-return `DocumentsPage.tsx` scaffold. No execution or product changes are inferred during the pause. Existing focused frontend regression runs precede implementation. The authoritative last full frontend run remains 573/89; the derived inventory before this interface is frontend739/94, browser304, backend1053. These are inventories, not new full-suite passing counts.
 
-Later fetches at **15:52 and 15:55 UTC** fail because the configured remote host on port 443 is unreachable. The third fetch, **16:12:35.608743–16:12:56.824123**, exits **128** for the same connection failure; `remote-retry-20261016-1613/fetch-command.json` and `fetch.log` retain it. Fresh remote verification remains pending. The earlier entry receipt is not a claim of current remote identity; normal push and remote verification remain required.
+Fetches at **15:52 and 15:55 UTC** fail because the configured remote host on port 443 is unreachable. The third fetch, **16:12:35.608743–16:12:56.824123**, exits **128** for the same connection failure; `remote-retry-20261016-1613/fetch-command.json` and `fetch.log` retain it. Remote verification is pending at those observations. The later verified recovery below supplies a separate dated receipt; cached refs are not substituted for it.
 
 The authenticated `/documents` page sits under Career, with a new entry in the existing command palette and paired English/Bokmål labels. The approved index adds one route, bringing the inventory to **33 while preserving the original 32**. It uses the existing shell heading, semantic sections, table/mobile-card patterns, shared theme tokens and feedback infrastructure. No new renderer, editor, generic Document store, account upload bucket, mail persistence or dependency is introduced.
 
@@ -92,12 +92,14 @@ Required finite samples remain 320, 360, 390, 768, 1024, 1280, 1440 and 1920px,
 
 ## Preservation and remaining work
 
-The additions derive frontend inventory **755/95** from **739/94**: 15 new Documents cases and one command case, one new suite. The earlier **754/95** inventory preceded the new query regression case. Eight new native cases pass the finite current-build run and derive browser inventory **312** from **304**; publication remains pending. Backend inventory stays **1,053**, inherited from the pushed contract. These are inventory calculations, not fresh full-suite pass counts; P7-12 retains the integrated acceptance run.
+The additions derive frontend inventory **755/95** from **739/94**: 15 new Documents cases and one command case, one new suite. The earlier **754/95** inventory preceded the new query regression case. Eight new native cases pass the finite current-build run and derive browser inventory **312** from **304**; these Documents additions are now published. Backend inventory stays **1,053** at this checkpoint, inherited from the pushed contract. These are inventory calculations, not fresh full-suite pass counts; P7-12 retains the integrated acceptance run.
 
 All **57 PRES groups remain 56 PARTIAL / C11 DEFERRED**. Preserve the original 32 routes alongside the approved new route, owner/tenant authorization, canonical Career Profile data, CV overrides/revisions, one-job CV associations and immutable package content/files. Fresh P2-D01 passes as an ordinary case on latest H6; neither the earlier contract nor prior bDQ run is substituted for it.
 
-Final [static checks](evidence/ui-static-checks.json) pass at **2026-10-16 16:21 UTC**: secret scan, working/staged/phase whitespace, 19 documents / 518 local links, all57 groups and33 routes. Commit and verify the normal development push once remote access recovers. Retain every triaged contrast/manual qualification and the P7-11 missing-source copy finding. No actual MariaDB runtime, external provider delivery or fresh PDF corpus qualification is supplied by these UI tests. P5-13 remains withheld with **zero model qualification calls**; followMode stays deferred. Phase 8 is not implemented. **UI implemented-scope acceptance: CONDITIONAL GO locally; hygiene PASS, commit/push follow. P7-07 publication: pending. Production: NO-GO; main unchanged.**
+Final [static checks](evidence/ui-static-checks.json) pass at **2026-10-16 16:21 UTC**: secret scan, working/staged/phase whitespace, 19 documents / 518 local links, all 57 groups and 33 routes. Subsequent commit/publication outcomes are recorded below. Retain every triaged contrast/manual qualification and the P7-11 missing-source copy finding. No actual MariaDB runtime, external provider delivery or fresh PDF corpus qualification is supplied by these UI tests. P5-13 remains withheld with **zero model qualification calls**; followMode stays deferred. Phase 8 is not implemented. **UI implemented-scope acceptance: CONDITIONAL GO; hygiene PASS and publication verified. Production: NO-GO; main unchanged.**
 
 ## Actual local commit and failed publication — 2026-10-16
 
-Documents interface commit **`5a67ec3d3d5dc27298814b0a3f46540cb54ea3a3`** is safely recorded locally. Its [actual publication receipt](evidence/ui-publication.json) records the normal development push **16:22:30.090899–16:22:51.339211 UTC**, exit **128**, because `git.cesnimda.uk:443` could not be reached. No synchronization or remote acceptance is claimed. The previously verified remote development commit remains `8e4db12`; that is historical evidence. Main was not pushed. Implemented local scope remains CONDITIONAL GO; P7-07 publication is blocked. Independent P7-08 contract review and baseline checks can proceed, while P7-12 still requires every executed slice to be pushed before integrated acceptance.
+Documents interface commit **`5a67ec3d3d5dc27298814b0a3f46540cb54ea3a3`** is recorded locally before its [first normal publication attempt](evidence/ui-publication.json), **16:22:30.090899–16:22:51.339211 UTC**, fails with exit 128 because `git.cesnimda.uk:443` is unreachable. The second attempt at **16:31:50.187856–16:32:11.434629** also fails with exit 128. Publication is blocked at those observations; historical `8e4db12` is not treated as current live identity. Both exact failed attempts remain in the chronology.
+
+The later normal push **21:00:51.343381–21:00:53.589287** succeeds. At **21:01:11.788733 UTC**, direct development verification records local HEAD = origin development = live development = **`9dfea1226f57ba12b944e05e0e83fb2fea846131`**, containing implementation `5a67ec3`, publication documentation `84350b7` and the separate UTC repair. Local/origin/live main remain `27657f31131cd95d42f0e1290853ec9c9b3959a4`. The portable publication receipt retains the exact raw recovery path/hash. Known P7-08 notification presentation/native files remain unstaged work; synchronized refs do not mean a clean working tree or publication of that WIP. **P7-07 publication is verified; conditional manual/production qualifications remain.**