Function verify_record_multi 

pub fn verify_record_multi(
    bytes: &[u8],
    layout: &OffsetTable,
    fields: &[Field],
    record_base: usize,
    multi: MultiRegion,
) -> Result<(), VerifyError>

Multi-region sibling of verify_record: verify a record laid out at the arena-absolute offset record_base, where every pointer slot holds an arena-absolute offset and the graph may legitimately span the const / in / out / scratch regions described by multi.

bytes is the whole arena slice (offsets are absolute into it), and must cover at least the largest region end. This is the entry point the object positive-bytes_written return path runs before decoding a cross-region object head — the gap the S5 design flagged as the red-line “object slot cross-region pointer is not verified”.