- a non-ok integrity_check verdict raises DatabaseError carrying the
NOTADB marker so it classifies as corruption unconditionally; ANY
DatabaseError escaping the probe propagates (no more swallowing
structural problems as non-corruption)
- file URI built via Path.resolve().as_uri() so #/?/% in paths cannot
mis-target the probe
- migration-stage test now spies on NestQuestDatabase.open and asserts
the read-write open was NEVER reached: the whole-file preflight
rejecting corruption before the WAL transition is the mechanism
under test, and the byte-identical + no-sidecar assertions prove it
- store guard permits SELECT + PRAGMA integrity_check on the ro-conn
Joshua King
5b5aa7c789