Hardening for keep-state cross-node replication: signed cluster manifest/epoch (relay-omission + TOFU-rollback detection), persistent outbox, bounded publish channel + resend, table/record binding into the encrypted payload, and rejected-event log-flood dedup.
This groups several tracked sub-tasks; break out individual PRs as you tackle them.
Hardening for keep-state cross-node replication: signed cluster manifest/epoch (relay-omission + TOFU-rollback detection), persistent outbox, bounded publish channel + resend, table/record binding into the encrypted payload, and rejected-event log-flood dedup.
This groups several tracked sub-tasks; break out individual PRs as you tackle them.