pub fn recover(
engine: &Engine,
root: Txid,
sources: &[&dyn RecordSource],
limits: RecoveryLimits,
scratch: &Path,
) -> Result<RecoveredObject, Error>Expand description
Recover an object without exporting partial output. This reuses the existing root/leaf/data signed-reference and final length/digest checks. Reorg during recovery invalidates the result; cached immutable bytes remain reusable. The scratch directory belongs to the caller. No plaintext decryption occurs.