Restores a stored heap into this instance, or explains why it refused.
Called after the mount, bridge and capabilities are installed: they populate the JS side that
the heap's vrzno handles index into.
The stored rows are hashed and compared to the root sealed outside SQL before anything else
touches the instance; an image with no record, or with rows that hash to another root, is
deleted and the boot continues from the pack. The fd table is asserted before the memcpy and a
refusal is loud: dropped sqlite descriptors give a locking-protocol error after an 80-120 s
stall (a hung request on the edge), while a refusal costs one boot.
Restores a stored heap into this instance, or explains why it refused.
Called after the mount, bridge and capabilities are installed: they populate the JS side that the heap's vrzno handles index into.
The stored rows are hashed and compared to the root sealed outside SQL before anything else touches the instance; an image with no record, or with rows that hash to another root, is deleted and the boot continues from the pack. The fd table is asserted before the memcpy and a refusal is loud: dropped sqlite descriptors give a locking-protocol error after an 80-120 s stall (a hung request on the edge), while a refusal costs one boot.