“Completion is fenced too: Beads accepts a receipt only when the work ID, generation, claim token, and Workflow identity still match.”

Fencing tokens borrowed from distributed systems, applied to agent work. She is careful to say two of the three fixes still run in shadow and the third in a scoped canary, so this is a design, not a proven guarantee.