pub fn select_pointer(
editions: &[DissolvedEdition],
owner_hex: &str,
) -> Option<(MigrationPayload, String)>Expand description
Total, payload-aware pointer selection over the owner’s tombstones: the pointer comes
from the newest PAYLOAD-CARRYING owner-signed tombstone (tiebreak lowest inner id); a
payload-less {} tombstone SEALS the community but never shadows a payload-bearing one
— otherwise a plain dissolution from a second device would silently shed the keys for
every future straggler. (Corollary, deliberate: a NEWER payload-bearing tombstone
WITHOUT m is the owner’s honest-client-scoped retraction lever for the on-ramp.)