Stop recovery when endpoint resolution changes

docs/release.md

@@ -86,8 +86,8 @@ Check that Git URL rewriting still resolves this value to itself before querying
 ```sh
 releasekit_endpoint='COPY_CAPTURED_ENDPOINT'
 releasekit_version='vX.Y.Z'
-test "$(git ls-remote --get-url -- "$releasekit_endpoint")" = "$releasekit_endpoint"
-git ls-remote --refs -- "$releasekit_endpoint" "refs/tags/$releasekit_version"
+test "$(git ls-remote --get-url -- "$releasekit_endpoint")" = "$releasekit_endpoint" &&
+  git ls-remote --refs -- "$releasekit_endpoint" "refs/tags/$releasekit_version"
 ```
 
 A failed URL-equality check or remote query leaves the outcome unresolved.

docs/roadmap/remediation.md

@@ -356,7 +356,9 @@ runbook checks URL resolution and queries that exact endpoint, retaining tags
 on failed or unresolved checks. Local wrapper fixtures use separate fetch and
 push repositories; a lost acknowledgment changes the configured push URL, and
 recovery still finds the intended object at the captured endpoint while the
-fetch endpoint reports absence. Focused publication/wrapper tests pass.
+fetch endpoint reports absence. The guarded runbook commands are exercised
+verbatim, including refusing a query after URL rewriting changes the endpoint.
+Focused publication/wrapper tests pass.
 
 ### R10 — Medium: The boundary checker bans valid command-internal composition