A separate append-only log for space authorities, members, permissioned repos, oplog, revocations and notification registrations, with batch replay that discards torn writes and recomputes the set hash on restore.
Co-Authored-By: Claude Code noreply@anthropic.com