[aruintelligence]

Summary

• Add an opt-in monotonic checkpoint outside the file authority directory. It advances before grant issuance, issuer revocation, and one-use claims; a fresh worker refuses an older restored authority snapshot when the independent anchor remains current.
• Provide a one-machine file anchor example with synchronous compare-and-swap and strict startup checks. It can be combined with the spent-only claimOnce hook.
• Keep the newer epochAnchor protocol intact. The checkpoint and epoch anchor are explicit alternatives for revocation protection, since their external commits cannot be made atomic together in this pilot.
• Document the retention and crash boundaries. Tests include child-process rollback, an unspent grant after revocation, combined spent-claim hooks, and the counterexample where both directories roll back.

Verification

• npm test: 1,002 passed on current main
• npm run check:links: 411 Markdown files passed
• git diff --check origin/main...HEAD: passed

This is a one-machine pilot. A shared rollback of the authority and checkpoint still permits replay; the test demonstrates that limitation. No live provider send or independently controlled production anchor is claimed.