- pin bounded path-safe archive and parser behavior - require encrypted idempotent fail-soft persistence and WHOOP regressions