Davy7/21/2026, 4:13:40 AM

- Extend durable operation payload with protocol step and immutable candidate identity.
- Hold per-library commit lock across asset upload, candidate freeze, CAS, and completion.
- Recovery re-uploads assets from song_ids before re-entering the executor.
- Bind resumable upload sessions to candidate SHA-256; verify remote digest after upload.
- Keep download partials on transient failure; resume database pulls via Range.
- Bootstrap register/reauth activates via temp + size/digest/SQLite + LKG atomic rename.
- Refresh epoch advances only on leader success; GC treats only not-found as success.
- Require Content-Range on 206 Partial Content for all providers.

Parent3b1fa6a