Versioned, bounded snapshots at model boundaries. Recovery never replays a tool from a partially persisted turn, even if it appears to have completed.