One invariant, three enforcement paths.
A late start follows an existing update.
Sorted replacement additions put update first.
State refuses to rebuild without start at index zero.
Preserve first. Continue elsewhere.
Keep the untouched Session log and hash the evidence copy.
Prove a fresh Session loads and reloads in the same workspace.
Carry only reviewed task context into the new Session.
Hide the affected Session without deleting its durable record.
Sequence numbers, replacement references, indexes, and other projections still describe the original log. A text edit can turn one reader failure into actual corruption.
A fix must own all three paths.
The replacement producer can preserve Definition-safe order, or the assembler can normalize one unique start into logical-first position. Either design must keep update order, location indexes, dependencies, duplicate-start refusal, and live/window/replay convergence.
Primary evidence.
- Official discussion #3450
- rc.8 conversation assembler
- Session export contract
- Surface-replacement contract
Keep the ordering evidence.
The complete runbook includes classification, safe export and continuation, a sanitized two-event reproduction, unsafe shortcuts, an incident bundle, and twelve regression gates.
Read the complete runbook