Module review 

A stateless, causal review for exact-item restoration. The full change hashes bind both the target and the live document; a checkpoint name is resolved once, never again when the caller restores. This is a write precondition, not a grant or a substitute for action-door admission.

Structs

RestoreReview

Copy the review object returned by review-restore unchanged into restore-reviewed. There is no server-local preview session to lose on restart, and no mutable name to resolve differently on replay.

Functions

answer

bounded

Bound historical reads rather than returning an incomplete document as if it were complete. A caller can read a smaller typed item instead.

specs