Four real live-port failures are injected sequentially. The harness never calls the full-refresh orchestrator. It observes the watcher threshold transition and automatic transactional refresh. Reboot, degraded retry, slot exhaustion, Direct emergency and bootstrap recovery are not tested.