faultline handoff
The planner hands a versioned snapshot to the release agent. The server copies every disputed assertion onto the handoff, so the client cannot drop it.