The existing watcher-owned recovery dispatcher now commits VM101 bridge state before repair, restores canonical mapping after success, preserves bridge state after failed repair, and feeds the durable outbox. Installation injected no live slot failure and changed no VM100 state.