HistoricalControlledVoting

The ordinary controlled runtime's concrete original before-vote boundary. Recovery authenticates immutable original rows. New/unfinished key use also checks the current persisted safe-vote watermark, without reacquiring the key controller gate. Each supplied store is an actual exclusively opened original journal, not a caller-constructed safety summary.