Function check_resume_integrity 

pub fn check_resume_integrity(journal: &Journal) -> CheckResult

resume-integrity — a resume must recover exactly what the journal records. last_seq_seen above the recorded prefix is a recovery of events that never happened (a corrupt recovery); below it is quantified work loss — the resumed harness is blind to events its own durable record holds, which is how a harness re-does work it already did.