Avoid materializing the complete pending queue for every publication step. Retain full cache-open validation and share row validation with queue inspection. Add malformed-tail coverage and make the cancellation test observe actual SQLite lock release.

Verified the notebook suite and an isolated 1000-edit workload with every receipt and recovery image retained.

Assisted-by: gpt-6-astra