[ovasylenko]

Worker reconnect could resend a held task after its parent stopped, its physical source froze or retired, or its explicit deadline elapsed. Older blocked rows could also consume the delivery limit ahead of healthy work.

Screen those conditions before LIMIT in both PostgreSQL and SQLite reconnect queries. Preserve held rows, claim epochs and original issuance/outcome evidence. Unsealed abort restores eligible work; permanent retirement stays fenced. Use numeric epoch arithmetic on PostgreSQL so large valid task timeouts cannot overflow interval construction. NULL lease durations retain the separate server-default confirmation policy.

Validation:

• Reproduced 28 failing regression legs on clean main before the fix.
• Reproduced and fixed the PostgreSQL extreme-timeout overflow.
• All 120 issuance and 213 source-cut tests passed with required PostgreSQL, across plain/encrypted SQLite/PostgreSQL.
• Strict all-target storage Clippy and workspace formatting passed.