Mind::refresh holds the pull error as the held fault (reads and admission
refuse with it until a restart), so no arm of commit answers or writes on a
stale image. Tests: pull counts on reads and landed swaps, one look per lost
swap and store error, universe sizes for keys, a rare field value and a cited
target, both hops with a schema excluding the target, planted double closers,
the identities a Conflict names, oracle_ids non-empty.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>