Document completed workspace behavior

docs/cli.md

@@ -42,7 +42,7 @@ Flags:
 - `--only lane-a,lane-b`: run only the named artifact lanes. Values are
   comma-separated and must be non-empty.
 - `--resume`: reuse valid workspace checkpoints for this invocation. Requires
-  `workspace.resume.enabled: true`.
+  an effective workspace directory and `workspace.resume.enabled: true`.
 - `--output-dir path`: output root. The run writes to `<path>/<run-id>/`.
   Defaults to `./notarius-output`.
 - `--diagnostics-dir path`: diagnostics work directory override for this
@@ -152,6 +152,11 @@ go run ./cmd/notarius run dnd-session \
   --resume
 ```
 
+Plain `run` does not skip completed work. It executes the pipeline normally and
+refreshes checkpoints when checkpointing is enabled. `--resume` verifies each
+checkpoint before reuse and executes any missing, corrupt, or incompatible step
+normally.
+
 For durable output, diagnostics, retention, and failure inspection, see
 [Operations](operations.md).