pub fn controlled_contact_fields(raw: &[u8]) -> Result<Vec<u32>>
Extract only the proved field-control IDs. Version ordering is deliberately not guessed: callers preserve these fields and retain the unresolved update.