sched: remediate R4 ownership, identity-match, dispatch-mark, and pending atomicity

src/wf_api/runs.py

@@ -188,7 +188,14 @@ class WorkflowRunApi:
         trace_range: TraceRangeLike | None,
     ) -> RunResult:
         trace_values = _trace_range_values(trace_range)
-        record, stopped_run = restore_interrupted_run(self._run_store(), run_id)
+        store = self._run_store()
+        pre_attempt = store.get_resume_attempt(run_id)
+        if pre_attempt is not None and pre_attempt.state == "ACTIVE":
+            raise ValueError(
+                f"workflow run {run_id!r} has an ambiguous active resume attempt; "
+                "recovery must fail it closed before retry"
+            )
+        record, stopped_run = restore_interrupted_run(store, run_id)
         environment = record.environment
         diagnostics = validate_pinned_resume_environment(
             record=record,