ERP Safety States

State	Meaning	Next action
dry_run	task shape and route validated without ERP write	request explicit authorization if real execution is required
blocked	a config, whitelist, duplicate, lock, session, or business rule stopped the action	resolve the named gate; do not retry blindly
execution_uncertain	save state lacks definitive ERP evidence	query registry/ERP and reconcile before retry
completed	identifier and saved fields verified after post-save re-query	continue to requested artifact delivery
post_save_recovery_required	save verified, export/delivery failed	run export-only recovery with neverResave=true

allowRealSubmit belongs to local config. The task contract must not contain credentials, whitelist data, or a command that bypasses the dispatcher.