Carry the reviewed session-scope implementation as an ordinary source patch and apply it once on a GitHub runner to avoid retranscribing the nearly 1 MB query module through the contents API. The workflow verifies exact source and patch blobs, rejects existing module/dirty checkout, stages only three source paths, and pushes a normal fast-forward commit directly to main. It does not open a PR, force-push, change branch protection, or alter existing CI/release workflows.
The patch resolves bounded authoritative message IDs through the existing read snapshot before vector top-k, intersects all metadata predicates, uses exact retained owners for scoped ANN requests, and suppresses unused ANN/two-tier setup. Nine authored tests cover candidate starvation, metadata and source restrictions, malformed/negative IDs, literal Unicode paths, bounded collection, rollback, and multi-shard merge. Correct the old patch's mismatched io::Error/FrankenError row mapper.
Local validation: git apply on synthetic contexts produces the exact reviewed edits and new module; whitespace and test-count checks pass. No full checkout application or Rust compilation/tests/Clippy/rustfmt/UBS/RCH execution has occurred in this editing environment. The workflow is transport, not runtime validation.
Jeff Emanuel