Expose an optional, allocation-free post-commit verification pair so embedders can prove that audited roots and live-cell edges no longer contain any old payload address while the forwarding plan is still available.
Scope
- Add paired
verifyRelocationRoots / verifyRelocationCell hooks.
- Invoke them only after every relocation commit and index/publication repair, before forwarding scratch is released.
- Iterate the current live graph (new payloads for moved cells, original payloads for pinned cells).
- Require both hooks or neither at compile time.
- Add a generic test that observes the post-commit destination graph and rejects stale old pointers.
- Document that verification is infallible/allocation-free and may trap on invariant failure.
Expose an optional, allocation-free post-commit verification pair so embedders can prove that audited roots and live-cell edges no longer contain any old payload address while the forwarding plan is still available.
Scope
verifyRelocationRoots/verifyRelocationCellhooks.