Applies the next slice of an in-flight restore. Driven by alarm(), never by a request.
The heap is read from the live binary each firing, since the cursor only means something for the
mounted heap. The cursor is in-memory, so it dies with the isolate and the next boot restarts at
chunk 0. It carries what the first firing verified against the sealed root, and each chunk is
checked against those digests as it lands; a cursor without them refuses.
Applies the next slice of an in-flight restore. Driven by
alarm(), never by a request.The heap is read from the live binary each firing, since the cursor only means something for the mounted heap. The cursor is in-memory, so it dies with the isolate and the next boot restarts at chunk 0. It carries what the first firing verified against the sealed root, and each chunk is checked against those digests as it lands; a cursor without them refuses.