Compaction provider-metadata boundary

Chose a hidden checkpoint containing a rolling summary and bounded recent context over retaining provider-native assistant, reasoning, and tool messages across compaction because changing the preceding transcript can invalidate signatures and encrypted reasoning. The full transcript remains durable, but no provider-native metadata may cross the active compaction boundary.