Pin review mode to certified HOT epochs

[samuelstroschein]

Summary

• query working changes only through lix_working_diff and carry its immutable before/after epoch through every review surface
• render Markdown, CSV, text, Excalidraw, image, video, and PDF from exact pinned HOT bytes; fail closed where HTML assets cannot be pinned
• make checkpoint history server-first and independent of current-row existence, with explicit unsupported states instead of mixed live/history data
• fence Keep, Undo, resolve, and bulk actions to the epoch the user reviewed

Dependency

Depends on opral/lix#1674 and pins its exact commit. No backward compatibility is intended; the peer floor moves to the certified working-diff SDK surface.

Validation

• typecheck
• full Vitest: 94 files, 1,114 passed, 1 skipped
• production build
• consumer fixture build
• touched-file oxlint and oxfmt checks

Repository-wide lint/format still report pre-existing violations in untouched files.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	atelier-preview	97d086c	Aug 31 2026, 05:49 PM