Reported from a handset: ashatron's avatar wrong and posts two weeks old. One fault, and this is its cause. let coHosted = false try { const s = await getRecordStore(did); coHosted = (await s.records()).length > 0 } catch {} coHosted decides the ingest baseline: true tails from the CURRENT END (right for a DID whose records hpp holds authoritatively), false rebuilds from the firehose. But it was computed from "are there any records on disk", and the backfill gate ten lines below already names why that cannot work — "it is self-fulfilling, because our own putPost populates that store for ingested peers too". So the first glance at a DID gave it records, which made it co-hosted for ever, which meant every later boot tailed from the end. A copy that started incomplete stayed incomplete permanently. Measured: ashatron indexed once in August, newest post 2026-08-09 on the phone against 2026-08-23 on stortron, and the avatar still the old CID because the profile record updated inside the hole. ⛔ The failure mode is the damage. A DID nobody is filling in does not render as absent or stale — it renders as a complete, plausible profile that is simply months out of date. It reads as corruption, and that is how it was reported. coHosted now means what its own comment always said: hpp holds this DID. Read from HOSTED_DIDS, the same authority /api/track consults HOSTED-FIRST for the same reason. Hosted DIDs are unaffected. Everything else rebuilds from the firehose, which is the only copy that can close a gap. Incidentally removes an O(repo) read — the old predicate loaded every record of a DID to compute a boolean, once per peer added. ⚠ KNOWN COST: non-hosted DIDs now replay from seq 0 on every boot. It is idempotent (putPost/putProfile dedup by content signature, so a replay re-reads without re-writing) but it re-reads frames each launch, on a phone. The real fix is a persisted per-DID fold cursor so a boot resumes where it stopped; the marker that exists today (needsBackfill) is a per-build boolean and cannot express a position. Until then, correct-and-costly beats cheap-and-frozen. Suite green. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>