docs: the pre-backfill remote fails LOUDLY, not silently I had written that the bucket "reads as a complete store and is not a recoverable one", which can be read as implying a silent partial recovery. Measured against the emulator: the open succeeds (the manifest IS complete) and replay_all then errors with "no reachable replica (1 listed)". It refuses the whole read rather than returning a short log. The trap is real but detectable, and the distinction changes the operational severity — so it should not be left ambiguous. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
docs: replica backfill — attaching a replica replicates nothing existing New page Design-Replica-Backfill: the one enqueue site (on seal), the prod measurement (40 parts in the remote manifest, 39 at replica_count 1 while survives_node_loss read 1), why the remote was worse than empty, the local_path-is-None trap under the fix, and why backfills carry their own counters. Cross-linked from Home Core Pages and the sidebar. Releases table was stale — v0.5.1 and v0.5.2 were missing; added those plus v0.6.0 and v0.7.0. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>