pub const MATCHER_ARTIFACT_FORMAT_VERSION: u32 = 4;
MatcherArtifact on-disk envelope version shared with lockdown header checks.