Integrity records for stored heap images, kept in sealed storage.
cfw_heap_snapshot and cfw_heap_chunk are SQL, so any PHP with a database write can plant an
image with matching row digests and have the next boot restore it into linear memory. The root
of each image the host wrote lives in key-value storage under heapsum:<snapshot id>, which the
SQL bridge cannot read or write; a snapshot with no record, or one whose stored rows hash to a
different root, is never restored.
Integrity records for stored heap images, kept in sealed storage.
cfw_heap_snapshotandcfw_heap_chunkare SQL, so any PHP with a database write can plant an image with matching row digests and have the next boot restore it into linear memory. The root of each image the host wrote lives in key-value storage underheapsum:<snapshot id>, which the SQL bridge cannot read or write; a snapshot with no record, or one whose stored rows hash to a different root, is never restored.