Expand description
Operation journal (D3): durable, crash-recoverable records linking backups, mutations, and audit across the local/remote database boundary. Because the audit DB and the target server cannot share a distributed transaction, every gated mutation writes journal transitions; a crash between remote commit and local finalization leaves a visibly ambiguous record rather than silent success/failure.