Boot-read: the live user-ruled decisions and the roads they rejected. A near-zero-cost,
0-network read (read_all only; no git, no receipts) for a fresh agent to load the
decisions it must respect and the options it must not re-propose. Load-bearing rulings
(those that closed a road) sort FIRST — pinned above the cap regardless of recency — then
by recency (held_since), then id. Capped to the effective limit, with a remainder footer
that counts how many hidden rulings closed a road so the elision stays visible.