Caller-defined stable seller + authenticated-principal scope.
Optional
Rejected leaf this acknowledgement replaces, absent for the first leaf.
Versioned immutable-context identity; prevents a changed correction from wedging the prior checkpoint.
Caller-defined stable seller + authenticated-principal scope.