[decebal]

Summary

• Support explicit bounded snapshot budgets for full large-repository checkouts while retaining default limits and guarded-file checks.
• Reuse primary Chronis from linked worktrees, recognize safe embedded metadata and refuse independent local tracker data.
• Keep initialization below the enforced module cap with tracker-specific checks in the Chronis module.

Validation

• Earlier scoped proof: 13 bootstrap tests and six workspace cases passed; two optional real-store tests skipped.
• Actual Longhand init, doctor, full-source run creation and local ownership handoff verified. Run remains parked; no authenticated worker or model call executed.
• Final granular architecture/bootstrap checks: 15 passed, two optional skips.
• Final-head CI passed on Linux and macOS; source/dependency checks including strict Clippy passed.
• Formatting and whitespace checks.

Local bootstrap checks bind ALLSTACK_TEST_BINARY to the source-built executable to avoid cached paths after worktree relocation.

Design and proof: Longhand compatibility. No live run store, source snapshots, customer data, credentials or transcripts are included.