CI watch on a FAILED task may never close (unverified) #27

Found in the 2026-10-23 architecture review, not reproduced yet.

A CI watch (ADR 0041) is opened on delivery. If the task later ends FAILED (e.g. a CI fix run fails for good), the watch may stay open forever instead of closing.

First step: a CiWatchTest case: delivered -> red -> fix run fails -> the watch must be closed. Fix only if it fails.