Cuts the journal and the heap where a power cut between the two appends would, and requires every state to open and hold together: a body no entry names is swept, a slot past the end of the heap drops its record, a damaged frame is refused rather than served, and a compare-and-swap is decided from the slot with the body unreadable. A record written through XRPC reads back through XRPC after a restart of the real binary, and the resident cost of a record no longer moves with the size of its value. Change-Id: Ied13597505be3e182c16acd2f7fff1b4c8780c27 (cherry picked from commit a90d02bc196a84489fbc860c13ef50c4bd16d3b8)