ForgeFlow/docs/ERROR_CODES.md

ForgeFlow error and recovery catalog

Code	Meaning	Recovery
RECONCILIATION_PLAN_REQUIRED	A server mutation was requested without its reviewed plan.	Open Review reconciliation and apply the current plan ID.
RECONCILIATION_PLAN_STALE	Server truth changed after preview.	Rescan, review the new impact and apply that plan.
SERVER_GIT_VERIFICATION_FAILED	Branch, deploy key or pinned SSH evidence could not be proven.	Run Verify server pull; repair only the failing check before retrying.
DEPLOY_KEY_NOT_READ_ONLY	A matching key can write to Gitea.	Revoke it in Gitea and configure a dedicated read-only key.
SSH_DEPLOYMENT_PREFLIGHT_FAILED	One or more deployment safety checks failed.	Open preflight evidence and follow the failing check's detail.
REMOTE_WRITE_ACCESS_REQUIRED	The SSH user cannot safely write the managed source/state paths.	Use Check / fix write access after reviewing its scoped impact.
UPDATE_ORIGIN_MISMATCH	An update asset points outside the trusted Gitea origin.	Correct release asset URLs; never bypass the origin check.
UPDATE_CHECKSUM_MISMATCH	Downloaded bytes do not match the published checksum.	Keep the current version and republish the exact commit atomically.

Audit and discovery never repair these conditions automatically. Mutating recovery actions require an explicit user flow and preserve rollback or snapshot evidence.